VIRY.CZ

Hmm, Avira snad funguje jak má, tady je ještě jeden scan z ComboFixu

ComboFix 14-07-22.01 - Dana 23.07.2014 23:28:59.7.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2247 [GMT 2:00]
Spuštěný z: c:\users\Dana\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
FW: ZoneAlarm Free Firewall Firewall *Disabled* {E6380B7E-D4B2-19F1-083E-56486607704B}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-06-23 do 2014-07-23 )))))))))))))))))))))))))))))))
.
.
2014-07-23 21:41 . 2014-07-23 21:41 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-07-23 21:41 . 2014-07-23 21:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-07-23 09:59 . 2014-07-23 11:30 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-07-23 09:42 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-07-23 08:51 . 2014-07-23 08:53 -------- d-----w- C:\FRST
2014-07-23 07:02 . 2014-07-23 09:46 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{20106FD1-AFA7-4681-BC74-BCA1510CC3AF}\offreg.dll
2014-07-23 06:02 . 2014-07-02 03:09 10924376 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{20106FD1-AFA7-4681-BC74-BCA1510CC3AF}\mpengine.dll
2014-07-23 05:54 . 2014-07-23 05:54 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-07-17 13:02 . 2014-07-17 13:02 -------- d-----w- c:\users\Dana\AppData\Roaming\LG Electronics
2014-07-15 16:18 . 2014-07-15 16:18 -------- d-----w- c:\program files (x86)\Microsoft XNA
2014-07-11 12:29 . 2014-07-11 12:29 -------- d-----w- c:\users\Dana\AppData\Local\LG Electronics
2014-07-11 12:26 . 2014-07-11 12:28 -------- d-----w- c:\program files (x86)\LG Electronics
2014-07-09 06:34 . 2014-06-03 10:02 1719296 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-07-09 06:34 . 2014-06-03 10:02 1389568 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2014-07-09 06:34 . 2014-06-03 10:02 1380864 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2014-07-09 06:34 . 2014-06-03 10:02 1354240 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-07-09 06:34 . 2014-06-03 09:29 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2014-07-09 06:32 . 2014-06-05 14:45 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-07-09 06:32 . 2014-06-05 14:26 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-07-09 06:32 . 2014-06-05 14:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-07-08 06:59 . 2014-07-23 18:24 -------- d-----r- c:\users\Dana\Dropbox
2014-07-08 06:57 . 2014-07-23 21:02 -------- d-----w- c:\users\Dana\AppData\Roaming\Dropbox
2014-07-06 12:44 . 2014-07-06 13:22 -------- d-----w- c:\users\Dana\AppData\Roaming\Notepad++
2014-07-06 12:44 . 2014-07-06 12:44 -------- d-----w- c:\program files (x86)\Notepad++
2014-07-04 08:41 . 2014-07-04 08:41 -------- d-----w- c:\users\Public\Foxit Software
2014-06-29 08:08 . 2014-06-29 08:09 -------- d-----w- c:\program files\Inkscape-0.48
2014-06-26 12:55 . 2014-07-03 12:46 -------- d-----w- c:\users\Dana\AppData\Roaming\PilotEdit
2014-06-26 12:55 . 2014-07-03 12:46 -------- d-----w- c:\program files\PilotEdit x64
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-17 12:33 . 2013-05-07 12:49 42040 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-07-15 15:21 . 2012-06-13 16:29 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-07-15 15:21 . 2014-05-25 13:17 281392 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-07-15 15:21 . 2012-06-13 16:29 281392 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-07-09 10:10 . 2011-09-29 08:08 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-07-09 09:32 . 2012-12-01 09:37 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-09 09:32 . 2012-12-01 09:37 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-06-24 11:50 . 2013-03-25 15:00 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-06-23 15:02 . 2012-06-13 16:29 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-06-03 12:56 . 2013-03-25 15:00 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-05-30 07:52 . 2014-07-09 06:33 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-05-29 23:07 . 2014-06-02 16:00 1291232 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-05-29 23:07 . 2013-10-29 11:31 1122312 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-05-29 23:07 . 2014-06-02 16:00 1715176 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-05-29 23:07 . 2013-10-29 11:31 1279480 ----a-w- c:\windows\system32\nvspcap64.dll
2014-05-20 02:44 . 2014-06-02 16:11 11599072 ----a-w- c:\windows\system32\nvopencl.dll
2014-05-20 02:44 . 2014-06-02 16:11 9697640 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-05-20 02:44 . 2014-06-02 16:11 31387936 ----a-w- c:\windows\system32\nvoglv64.dll
2014-05-20 02:44 . 2014-06-02 16:11 24025376 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-05-20 02:44 . 2014-06-02 16:11 895776 ----a-w- c:\windows\system32\NvIFR64.dll
2014-05-20 02:44 . 2014-06-02 16:11 892704 ----a-w- c:\windows\system32\NvFBC64.dll
2014-05-20 02:44 . 2014-06-02 16:11 867784 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-05-20 02:44 . 2014-06-02 16:11 861128 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-05-20 02:44 . 2014-06-02 16:11 3141976 ----a-w- c:\windows\system32\nvcuvid.dll
2014-05-20 02:44 . 2014-06-02 16:11 2953672 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-05-20 02:44 . 2014-06-02 16:11 2785568 ----a-w- c:\windows\system32\nvcuvenc.dll
2014-05-20 02:44 . 2014-06-02 16:11 2412376 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2014-05-20 02:44 . 2014-06-02 16:11 1889112 ----a-w- c:\windows\system32\nvdispco6433788.dll
2014-05-20 02:44 . 2014-06-02 16:11 17480432 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-05-20 02:44 . 2014-06-02 16:11 1541576 ----a-w- c:\windows\system32\nvdispgenco6433788.dll
2014-05-20 02:44 . 2014-06-02 16:11 12688328 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-05-20 02:44 . 2014-06-02 16:11 9735256 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-05-20 02:44 . 2014-06-02 16:11 11644928 ----a-w- c:\windows\system32\nvcuda.dll
2014-05-20 02:44 . 2014-06-02 16:11 25256224 ----a-w- c:\windows\system32\nvcompiler.dll
2014-05-20 02:44 . 2014-06-02 16:11 17561544 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-05-20 02:44 . 2014-04-16 08:01 18531568 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-05-20 02:44 . 2014-04-16 08:01 16003912 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-05-20 02:44 . 2014-04-16 08:01 14434704 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-05-20 02:44 . 2014-04-16 08:01 3109248 ----a-w- c:\windows\system32\nvapi64.dll
2014-05-20 02:44 . 2014-04-16 08:01 2730208 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-05-20 02:44 . 2014-04-16 07:49 61216 ----a-w- c:\windows\system32\OpenCL.dll
2014-05-20 02:44 . 2014-04-16 07:49 52056 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-05-20 01:25 . 2014-04-16 07:50 6769096 ----a-w- c:\windows\system32\nvcpl.dll
2014-05-20 01:25 . 2014-04-16 07:50 3514144 ----a-w- c:\windows\system32\nvsvc64.dll
2014-05-20 01:25 . 2014-04-16 07:50 927520 ----a-w- c:\windows\system32\nvvsvc.exe
2014-05-20 01:25 . 2014-04-16 07:50 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-05-20 01:25 . 2014-04-16 07:50 387528 ----a-w- c:\windows\system32\nvmctray.dll
2014-05-20 01:25 . 2014-04-16 07:50 2560968 ----a-w- c:\windows\system32\nvsvcr.dll
2014-05-19 23:10 . 2014-06-02 16:18 601432 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-05-14 23:49 . 2014-06-02 16:17 3774821 ----a-w- c:\windows\system32\nvcoproc.bin
2014-05-12 17:05 . 2014-05-12 17:06 313256 ----a-w- c:\windows\system32\javaws.exe
2014-05-12 17:05 . 2014-05-12 17:05 189352 ----a-w- c:\windows\system32\javaw.exe
2014-05-12 17:05 . 2014-05-12 17:05 189352 ----a-w- c:\windows\system32\java.exe
2014-05-12 17:05 . 2014-05-12 17:05 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-05-09 06:14 . 2014-05-14 07:06 477184 ----a-w- c:\windows\system32\aepdu.dll
2014-05-09 06:11 . 2014-05-14 07:06 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-05-08 09:32 . 2014-06-12 07:04 3178496 ----a-w- c:\windows\system32\rdpcorets.dll
2014-05-08 09:32 . 2014-06-12 07:04 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-04-25 02:34 . 2014-06-12 07:04 801280 ----a-w- c:\windows\system32\usp10.dll
2014-04-25 02:06 . 2014-06-12 07:04 626688 ----a-w- c:\windows\SysWow64\usp10.dll
2009-09-27 07:39 369152 --sh--w- c:\windows\SysWOW64\avisynth.dll
2005-07-14 10:31 32256 --sh--w- c:\windows\SysWOW64\AVSredirect.dll
2004-02-22 08:11 719872 --sh--w- c:\windows\SysWOW64\devil.dll
2004-01-24 22:00 70656 --sh--w- c:\windows\SysWOW64\i420vfw.dll
2004-01-24 22:00 70656 --sh--w- c:\windows\SysWOW64\yv12vfw.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 131480 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm"="c:\program files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [2014-04-24 137352]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-06-05 2171904]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-06-24 750160]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-07-07 189520]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-07-21 3816784]
.
c:\users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-7-21 35464216]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
OnTranslator.lnk - c:\program files (x86)\OnTranslator.com\OnTranslator.exe /h [2012-12-29 1085440]
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-7-3 563416]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 XAMPP;XAMPP Service;c:\xampp\service.exe;c:\xampp\service.exe [x]
R3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\DRIVERS\lgandnetdiag64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetdiag64.sys [x]
R3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\DRIVERS\lgandnetmodem64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetmodem64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv.sys;c:\windows\SYSNATIVE\DRIVERS\mcvidrv.sys [x]
R3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys;c:\windows\SYSNATIVE\drivers\mcaudrv_x64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys;c:\windows\SYSNATIVE\Drivers\VBoxUSB.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 602XML Updater;602Updater;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe;c:\program files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Apache2.4;Apache2.4;c:\xampp\apache\bin\httpd.exe;c:\xampp\apache\bin\httpd.exe [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service;c:\program files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe;c:\program files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 ZAPrivacyService;ZoneAlarm Privacy Service;c:\program files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe;c:\program files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [x]
S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys;c:\windows\SYSNATIVE\Drivers\nx6000.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys;c:\windows\SYSNATIVE\DRIVERS\vcsvad.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-07-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-01 09:32]
.
2014-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 11:51]
.
2014-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 11:51]
.
2014-07-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job
- c:\users\Dana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-28 20:03]
.
2014-07-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job
- c:\users\Dana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-28 20:03]
.
2014-07-23 c:\windows\Tasks\ParetoLogic Registration.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\Dana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-05-29 1279480]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2352072]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:Tabs
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = localhost; 127.0.0.1; <local>
IE: Copy to Semagic - c:\program files (x86)\Semagic\copy.htm
IE: Semagic - c:\program files (x86)\Semagic\link.htm
FF - ProfilePath - c:\users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
------- Asociace souborů -------
.
txtfile="c:\program files (x86)\PSPad editor\PSPad.exe" "%1"
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-_{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91} - c:\program files (x86)\Corel\CorelDRAW Graphics Suite 13\Programs\MSILauncher {7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2014-07-23 23:45:37
ComboFix-quarantined-files.txt 2014-07-23 21:45
ComboFix2.txt 2014-07-23 15:23
ComboFix3.txt 2014-07-23 12:37
.
Před spuštěním: Volných bajtů: 227 694 837 760
Po spuštění: Volných bajtů: 227 628 634 112
.
- - End Of File - - 79BE70E9E05DB3A1EE3B7EAD45E4AA8E
A36C5E4F47E84449FF07ED3517B43A31

Logfile of random's system information tool 1.10 (written by random/random)
Run by Dana at 2014-07-23 23:47:26
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 218 GB (46%) free of 477 GB
Total RAM: 4095 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:47:29, on 23.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Trillian\trillian.exe
C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FOXIT READER.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Program Files\trend micro\Dana.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; 127.0.0.1; <local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll
O3 - Toolbar: ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Startup: Dropbox.lnk = C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: OnTranslator.lnk = C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: Copy to Semagic - C:\Program Files (x86)\Semagic\copy.htm
O8 - Extra context menu item: Semagic - C:\Program Files (x86)\Semagic\link.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDow ... rtScan.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_core.dll,-101 (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Corporation - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\xampp\service.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

--
End of file - 12282 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\xampp\apache\bin\httpd.exe" -k runservice
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe" --type=host --daemon-pipe=384
"C:\Program Files\Microsoft LifeCam\MSCamS64.exe"
C:\xampp\mysql\bin\mysqld.exe --defaults-file=C:\xampp\mysql\bin\my.ini mysql
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PSIService.exe
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe"
WLIDSvcM.exe 2628
C:\xampp\apache\bin\httpd.exe -d C:/xampp/apache
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000774
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 9222bd9e-d09b-4682-8069-9bab272a6cff 1
\??\C:\Windows\system32\conhost.exe "605596003126506822512694474881666200540412524252028745577-45738-510386313
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d42603c0-ec79-41c3-8c3a-6b8358c2b31c -SystemEventPortName:HostProcess-9b1b3511-2ce5-4c7a-8c04-36351c705665 -IoCancelEventPortName:HostProcess-a2a336be-78e6-4b0b-b181-c70948ab93d7 -NonStateChangingEventPortName:HostProcess-2710ad8d-e26c-41ad-bc5c-02027e554c56 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:43dda332-1b51-4840-9e43-f10ecaff691b -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe" /h
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "6042440091364554180894892683424804036-11277085381649722022-929320884-105831686
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Windows Live\Mail\wlmail.exe"
"C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding
"C:\Program Files (x86)\Trillian\trillian.exe"
"C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FOXIT READER.EXE" "C:\Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8A5QOGC8\nausnice logo - krivky.pdf"
taskeng.exe {E6BCF675-3EAE-4C12-9A61-28CACDC6CEDB}
C:\Windows\explorer.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2680.18575130.623442458 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2680 "\\.\pipe\gecko-crash-server-pipe.2680" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe" --proxy-stub-channel=Flash3572.5EC40D80.2422 --host-broker-channel=Flash3572.5EC40D80.27764 --host-pid=3572 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe" --channel=5636.0038F244.1331161641 --proxy-stub-channel=Flash3572.5EC40D80.2422 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\AUDIODG.EXE 0xa80
taskeng.exe {5A23BB20-78CD-4A1F-B173-EF33EEB1327F}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler
"C:\Users\Dana\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-07-23 23:45:46 ----SHD---- C:\$RECYCLE.BIN
2014-07-23 23:45:39 ----D---- C:\Windows\temp
2014-07-23 23:45:38 ----A---- C:\ComboFix.txt
2014-07-23 23:27:26 ----D---- C:\ComboFix
2014-07-23 14:04:04 ----A---- C:\Windows\zip.exe
2014-07-23 14:04:04 ----A---- C:\Windows\SWSC.exe
2014-07-23 14:04:04 ----A---- C:\Windows\SWREG.exe
2014-07-23 14:04:04 ----A---- C:\Windows\sed.exe
2014-07-23 14:04:04 ----A---- C:\Windows\PEV.exe
2014-07-23 14:04:04 ----A---- C:\Windows\NIRCMD.exe
2014-07-23 14:04:04 ----A---- C:\Windows\MBR.exe
2014-07-23 14:04:04 ----A---- C:\Windows\grep.exe
2014-07-23 14:03:54 ----D---- C:\Qoobox
2014-07-23 11:59:05 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-23 11:42:23 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-07-23 10:51:08 ----D---- C:\FRST
2014-07-23 10:46:17 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-07-23 07:54:24 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 00:03:18 ----D---- C:\ProgramData\Google
2014-07-17 15:02:21 ----D---- C:\Users\Dana\AppData\Roaming\LG Electronics
2014-07-15 18:18:34 ----D---- C:\Program Files (x86)\Microsoft XNA
2014-07-11 14:26:32 ----D---- C:\Program Files (x86)\LG Electronics
2014-07-09 08:33:54 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 08:33:54 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 08:33:54 ----A---- C:\Windows\system32\osk.exe
2014-07-09 08:33:53 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 08:33:53 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 08:33:52 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 08:33:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 08:33:45 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 08:33:45 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 08:33:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 08:33:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 08:33:36 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 08:33:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 08:33:35 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 08:33:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 08:33:33 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 08:33:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 08:33:33 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 08:33:32 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 08:33:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 08:33:31 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 08:33:30 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 08:33:30 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 08:33:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 08:33:28 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 08:33:28 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 08:33:28 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 08:33:26 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 08:33:24 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 08:33:24 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 08:32:54 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-09 08:32:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 08:32:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-08 08:57:19 ----D---- C:\Users\Dana\AppData\Roaming\Dropbox
2014-07-06 14:44:51 ----D---- C:\Users\Dana\AppData\Roaming\Notepad++
2014-07-06 14:44:51 ----D---- C:\Program Files (x86)\Notepad++
2014-06-29 10:08:33 ----D---- C:\Program Files\Inkscape-0.48
2014-06-26 14:55:51 ----D---- C:\Users\Dana\AppData\Roaming\PilotEdit
2014-06-26 14:55:49 ----D---- C:\Program Files\PilotEdit x64

======List of files/folders modified in the last 1 month======

2014-07-23 23:47:28 ----D---- C:\Program Files\trend micro
2014-07-23 23:46:12 ----D---- C:\Program Files (x86)\Trillian
2014-07-23 23:45:39 ----D---- C:\Windows
2014-07-23 23:41:53 ----A---- C:\Windows\system.ini
2014-07-23 23:37:25 ----D---- C:\Windows\SYSWOW64\drivers
2014-07-23 23:37:25 ----D---- C:\Windows\SysWOW64
2014-07-23 23:37:25 ----D---- C:\Windows\AppPatch
2014-07-23 23:37:23 ----D---- C:\Program Files (x86)\Common Files
2014-07-23 23:27:40 ----D---- C:\Windows\Prefetch
2014-07-23 23:27:22 ----D---- C:\Windows\system32\drivers
2014-07-23 20:24:06 ----D---- C:\Users\Dana\AppData\Roaming\OnTranslator
2014-07-23 19:48:10 ----D---- C:\ProgramData\NVIDIA
2014-07-23 19:47:12 ----D---- C:\Windows\system32\config
2014-07-23 17:29:57 ----D---- C:\Windows\Internet Logs
2014-07-23 17:17:30 ----D---- C:\Windows\system32\drivers\etc
2014-07-23 17:17:01 ----D---- C:\Windows\system32\catroot2
2014-07-23 17:13:55 ----D---- C:\Windows\erdnt
2014-07-23 17:13:12 ----RD---- C:\Program Files (x86)
2014-07-23 16:50:26 ----D---- C:\Users\Dana\AppData\Roaming\AIMP3
2014-07-23 16:50:16 ----D---- C:\ProgramData
2014-07-23 14:14:00 ----D---- C:\ProgramData\Temp
2014-07-23 13:37:40 ----D---- C:\rsit
2014-07-23 12:38:07 ----D---- C:\Users\Dana\AppData\Roaming\.minecraft
2014-07-23 11:59:05 ----D---- C:\ProgramData\Malwarebytes
2014-07-23 11:47:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-23 11:45:59 ----D---- C:\AdwCleaner
2014-07-23 08:59:34 ----D---- C:\Windows\system32\NDF
2014-07-23 08:02:16 ----SHD---- C:\System Volume Information
2014-07-23 07:55:24 ----SHD---- C:\Windows\Installer
2014-07-23 00:02:02 ----D---- C:\Program Files (x86)\Google
2014-07-22 18:30:21 ----D---- C:\Users\Dana\AppData\Roaming\FileZilla
2014-07-22 11:33:07 ----D---- C:\de-zaloha
2014-07-20 13:10:48 ----D---- C:\Program Files (x86)\AIMP3
2014-07-19 12:30:37 ----D---- C:\Program Files (x86)\Steam
2014-07-16 16:32:09 ----RSD---- C:\Windows\Fonts
2014-07-15 18:18:59 ----RSD---- C:\Windows\assembly
2014-07-15 17:21:23 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-07-15 17:21:17 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-07-15 14:04:23 ----D---- C:\ProgramData\Package Cache
2014-07-15 14:03:58 ----D---- C:\Program Files (x86)\Avira
2014-07-12 17:10:17 ----D---- C:\Users\Dana\AppData\Roaming\Skype
2014-07-11 14:28:48 ----D---- C:\Windows\inf
2014-07-11 14:28:31 ----D---- C:\Windows\system32\catroot
2014-07-11 14:28:30 ----D---- C:\Windows\system32\DriverStore
2014-07-10 12:02:20 ----D---- C:\MCLAN
2014-07-10 09:00:36 ----D---- C:\Windows\winsxs
2014-07-10 00:38:06 ----D---- C:\Program Files\Windows Journal
2014-07-10 00:38:05 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-10 00:38:04 ----D---- C:\Windows\system32\Dism
2014-07-10 00:38:02 ----D---- C:\Windows\System32
2014-07-10 00:38:02 ----D---- C:\Windows\ehome
2014-07-10 00:38:00 ----D---- C:\Windows\system32\en-US
2014-07-10 00:38:00 ----D---- C:\Windows\system32\cs-CZ
2014-07-10 00:38:00 ----D---- C:\Program Files\Internet Explorer
2014-07-10 00:37:58 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-10 00:37:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 12:19:10 ----D---- C:\Windows\system32\MRT
2014-07-09 12:10:45 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 11:32:09 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-07-04 11:31:43 ----D---- C:\Windows\Microsoft.NET
2014-07-04 10:18:54 ----D---- C:\Program Files (x86)\FlashIntegro
2014-07-04 10:17:04 ----D---- C:\Program Files (x86)\Free Video Cutter
2014-07-04 10:11:40 ----D---- C:\Program Files\CCleaner
2014-07-04 09:58:53 ----D---- C:\Program Files (x86)\EA GAMES
2014-07-04 09:45:19 ----D---- C:\Windows\system32\Tasks
2014-07-03 15:37:05 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-07-03 15:05:39 ----SD---- C:\ProgramData\Microsoft
2014-07-03 15:05:35 ----D---- C:\Program Files (x86)\Microsoft Expression
2014-07-03 14:53:10 ----D---- C:\ProgramData\Ubisoft
2014-07-03 14:47:06 ----D---- C:\Program Files (x86)\Lightworks
2014-07-03 14:46:30 ----D---- C:\Program Files (x86)\eRightSoft
2014-06-30 12:31:43 ----D---- C:\Program Files (x86)\PROFIT
2014-06-29 10:11:36 ----D---- C:\Users\Dana\AppData\Roaming\inkscape
2014-06-29 10:08:33 ----RD---- C:\Program Files
2014-06-28 14:04:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-27 17:46:07 ----D---- C:\Program Files\OBS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2014-06-03 130584]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-10-07 28600]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2014-04-24 450968]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2014-06-24 117712]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [2011-09-16 15928]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2011-09-16 72216]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2011-09-16 11552]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 36720]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-30 20256]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf_amd64.sys [2013-07-03 18456]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-06-02 1207808]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [2013-04-18 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [2013-06-28 36352]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv.sys [2013-11-27 42016]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2013-12-06 35232]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-07-09 52736]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-11-04 146736]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-11-04 117040]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-06-24 430160]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-06-24 430160]
R2 Apache2.4;Apache2.4; C:\xampp\apache\bin\httpd.exe [2013-02-23 22016]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-07-07 141392]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [2014-06-17 242216]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 chromoting;@C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_core.dll,-101; C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe [2014-06-26 51016]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS64.exe [2010-12-13 194416]
R2 mysql;mysql; C:\xampp\mysql\bin\mysqld.exe [2013-05-16 8151040]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-05-30 1631008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-05-30 21055432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 927520]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-07-15 76888]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2013-07-03 1228504]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2013-07-03 660184]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-20 413128]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 116648]
S2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2014-04-25 3592120]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-23 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-07-16 542912]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-29 1255736]
S4 LMIMaint;LogMeIn Maintenance Service; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [2012-09-24 147368]
S4 LogMeIn;LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [2011-09-16 407424]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-07-14 81920]

-----------------EOF-----------------

Posledni sken a budem mazat.

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

OTL logfile created on: 26.7.2014 11:06:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dana\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 21,81% Memory free
8,00 Gb Paging File | 4,43 Gb Available in Paging File | 55,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 215,42 Gb Free Space | 46,26% Space Free | Partition Type: NTFS

Computer Name: HOME | User Name: Dana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.07.23 23:15:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dana\Desktop\OTL.exe
PRC - [2014.07.23 10:46:25 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014.07.21 23:02:50 | 035,464,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014.07.21 18:08:42 | 003,816,784 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2014.07.20 13:10:47 | 001,703,880 | ---- | M] (AIMP DevTeam) -- C:\Program Files (x86)\AIMP3\AIMP3.exe
PRC - [2014.07.15 17:21:23 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2014.07.09 11:32:09 | 001,869,488 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
PRC - [2014.06.17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
PRC - [2014.05.30 01:35:33 | 002,352,072 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014.05.30 01:31:38 | 001,631,008 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014.05.20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2014.04.25 00:37:50 | 003,592,120 | ---- | M] (Check Point Software Technologies Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
PRC - [2014.04.25 00:35:12 | 000,137,352 | ---- | M] (Check Point Software Technologies Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
PRC - [2014.04.09 17:26:10 | 000,092,176 | ---- | M] (Check Point Software Technologies, Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
PRC - [2014.04.08 00:00:00 | 005,306,880 | ---- | M] () -- c:\Program Files (x86)\Trillian\plugins\skypekit.exe
PRC - [2014.04.08 00:00:00 | 002,622,832 | ---- | M] (Cerulean Studios) -- C:\Program Files (x86)\Trillian\trillian.exe
PRC - [2014.03.04 15:51:26 | 000,789,504 | ---- | M] () -- C:\Users\Dana\Documents\XNALara_XPS\XNALara XPS.exe
PRC - [2013.07.03 10:32:44 | 001,228,504 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psia.exe
PRC - [2013.07.03 10:32:44 | 000,660,184 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe
PRC - [2013.07.03 10:32:42 | 000,563,416 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
PRC - [2013.05.16 17:44:20 | 008,151,040 | ---- | M] () -- C:\xampp\mysql\bin\mysqld.exe
PRC - [2013.02.23 13:04:24 | 000,022,016 | ---- | M] (Apache Software Foundation) -- C:\xampp\apache\bin\httpd.exe
PRC - [2012.12.29 19:10:06 | 001,085,440 | ---- | M] () -- C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
PRC - [2011.10.10 13:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) -- C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2007.06.05 13:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\SysWOW64\PSIService.exe
PRC - [2006.11.04 21:31:10 | 000,091,688 | ---- | M] (Corel Corporation) -- C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Programs\CorelPP.exe

========== Modules (No Company Name) ==========

MOD - [2014.07.26 09:05:46 | 000,043,008 | ---- | M] () -- c:\Users\Dana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnkis06.dll
MOD - [2014.07.23 10:46:25 | 003,800,688 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014.07.21 22:53:38 | 003,610,624 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2014.07.20 13:10:48 | 001,733,120 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\aimp_libvorbis.dll
MOD - [2014.07.20 13:10:48 | 000,294,400 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\libFLAC.dll
MOD - [2014.07.20 13:10:48 | 000,237,568 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\OptimFROG.dll
MOD - [2014.07.20 13:10:48 | 000,220,672 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\MACDll.dll
MOD - [2014.07.20 13:10:48 | 000,141,768 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\PandemicAnalogMeter.dll
MOD - [2014.07.20 13:10:48 | 000,072,136 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\aimp_lastfm.dll
MOD - [2014.07.20 13:10:48 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Aorta.svp
MOD - [2014.07.20 13:10:47 | 000,505,344 | ---- | M] () -- C:\Program Files (x86)\AIMP3\sqlite3.dll
MOD - [2014.07.20 13:10:47 | 000,218,112 | ---- | M] () -- C:\Program Files (x86)\AIMP3\libsoxr.dll
MOD - [2014.07.15 18:18:35 | 001,261,568 | ---- | M] () -- C:\Windows\assembly\GAC_32\Microsoft.Xna.Framework\3.0.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.dll
MOD - [2014.07.15 18:18:35 | 000,102,400 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Microsoft.Xna.Framework.Game\3.0.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.Game.dll
MOD - [2014.07.09 11:32:08 | 017,029,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll
MOD - [2014.04.08 00:00:00 | 005,306,880 | ---- | M] () -- c:\Program Files (x86)\Trillian\plugins\skypekit.exe
MOD - [2014.04.08 00:00:00 | 000,187,392 | ---- | M] () -- C:\Program Files (x86)\Trillian\libpng15.dll
MOD - [2014.04.08 00:00:00 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\Trillian\libungif.dll
MOD - [2014.04.08 00:00:00 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Trillian\zlib1.dll
MOD - [2014.03.04 15:51:26 | 000,789,504 | ---- | M] () -- C:\Users\Dana\Documents\XNALara_XPS\XNALara XPS.exe
MOD - [2014.02.14 10:26:35 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll
MOD - [2014.02.14 10:26:27 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll
MOD - [2014.02.14 10:26:21 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll
MOD - [2014.02.14 10:26:16 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll
MOD - [2014.02.14 10:25:58 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll
MOD - [2014.02.14 10:25:49 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
MOD - [2013.10.19 01:55:02 | 025,100,288 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2012.12.29 19:10:06 | 001,085,440 | ---- | M] () -- C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
MOD - [2012.11.28 09:21:36 | 000,002,048 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Trillian\languages\cs\toolkit.dll
MOD - [2012.11.28 09:21:34 | 000,009,728 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Trillian\languages\cs\buddy.dll
MOD - [2012.11.28 09:21:34 | 000,007,168 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Trillian\languages\cs\events.dll
MOD - [2012.11.28 09:21:34 | 000,006,144 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Trillian\languages\cs\talk.dll
MOD - [2011.10.31 12:16:44 | 000,004,608 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Trillian\languages\cs\trillian.dll
MOD - [2010.11.13 04:36:52 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 04:36:45 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.05 03:54:38 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll

========== Services (SafeList) ==========

SRV:64bit: - [2014.06.19 02:24:12 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014.05.30 01:28:54 | 021,055,432 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010.12.13 15:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.07.14 03:39:47 | 000,081,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tlntsvr.exe -- (TlntSvr)
SRV - [2014.07.23 10:46:25 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014.07.21 18:08:40 | 002,544,976 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014.07.16 10:53:44 | 000,377,616 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2014.07.16 04:28:18 | 000,542,912 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014.07.15 17:21:23 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014.07.09 11:32:09 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.06.26 21:19:40 | 000,051,016 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe -- (chromoting)
SRV - [2014.06.17 17:56:02 | 000,242,216 | ---- | M] (Foxit Corporation) [Auto | Running] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe -- (FoxitCloudUpdateService)
SRV - [2014.05.30 01:31:38 | 001,631,008 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2014.05.20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014.04.25 00:37:50 | 003,592,120 | ---- | M] (Check Point Software Technologies Ltd.) [Auto | Running] -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2014.04.09 17:26:10 | 000,092,176 | ---- | M] (Check Point Software Technologies, Ltd.) [Auto | Running] -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe -- (ZAPrivacyService)
SRV - [2013.09.11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013.07.03 10:32:44 | 001,228,504 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2013.07.03 10:32:44 | 000,660,184 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2013.05.16 17:44:20 | 008,151,040 | ---- | M] () [Auto | Running] -- C:\xampp\mysql\bin\mysqld.exe -- (mysql)
SRV - [2013.04.18 11:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2013.03.30 11:28:58 | 000,060,928 | ---- | M] () [Auto | Stopped] -- C:\xampp\service.exe -- (XAMPP)
SRV - [2013.03.01 03:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2013.02.23 13:04:24 | 000,022,016 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\xampp\apache\bin\httpd.exe -- (Apache2.4)
SRV - [2012.09.24 15:54:36 | 000,147,368 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2011.10.10 13:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2011.09.16 16:10:50 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007.06.05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PSIService.exe -- (ProtexisLicensing)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2014.05.30 01:28:53 | 000,020,256 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2014.04.24 23:03:34 | 000,450,968 | ---- | M] (Check Point Software Technologies Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vsdatant.sys -- (Vsdatant)
DRV:64bit: - [2014.03.31 18:42:44 | 000,040,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2013.12.06 15:37:50 | 000,035,232 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2013.11.27 03:54:02 | 000,042,016 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcvidrv.sys -- (ManyCam)
DRV:64bit: - [2013.10.02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013.08.29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2013.07.03 10:32:42 | 000,018,456 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf_amd64.sys -- (PSI)
DRV:64bit: - [2013.06.28 11:45:00 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
DRV:64bit: - [2013.04.18 16:14:12 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
DRV:64bit: - [2013.03.01 03:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2013.01.23 10:31:52 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2013.01.23 10:31:52 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2012.10.17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2012.09.24 15:54:26 | 000,087,488 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.07.09 14:42:54 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.04 13:37:00 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011.09.16 16:10:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2011.09.16 16:10:24 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2010.12.13 15:37:18 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
DRV:64bit: - [2010.11.20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:64bit: - [2010.11.20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010.11.20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:64bit: - [2009.08.23 05:08:10 | 000,056,320 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.02 16:55:20 | 001,207,808 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2009.05.14 09:26:24 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.12.26 12:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer)
DRV - [2011.09.16 16:10:50 | 000,015,928 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\..\SearchScopes\{06A8AFCA-3834-4726-BC43-1F90B285805F}: "URL" = http://search.zonealarm.com/search?src= ... er=&&r=170
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost; 127.0.0.1; <local>

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: "false"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7B3d7eb24f-2740-49df-8937-200b1cc08f8a%7D:1.5.17
FF - prefs.js..extensions.enabledAddons: %7B582195F5-92E7-40a0-A127-DB71295901D7%7D:0.6.4.1.3
FF - prefs.js..extensions.enabledAddons: %7Bd9babd10-47de-11df-9879-0800200c9a66%7D:1.01
FF - prefs.js..extensions.enabledAddons: seoanalysistool%40seoworkers:2.0
FF - prefs.js..extensions.enabledAddons: ClassicThemeRestorer%40ArisT2Noia4dev:1.2.2
FF - prefs.js..extensions.enabledAddons: YoutubeDownloader%40PeterOlayev.com:2.3.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@software602.cz/602XML Filler: C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@spoon.net/Spoon Plugin 3.33: C:\Users\Dana\AppData\Local\Spoon\3.33.3.13\npMozillaSpoonPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Dana\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014.07.23 10:46:18 | 000,000,000 | ---D | M]

[2011.10.26 18:01:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Extensions
[2011.10.26 18:01:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Extensions\songbird@songbirdnest.com
[2014.07.23 20:25:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions
[2014.05.12 23:22:33 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
[2013.10.04 13:06:10 | 000,000,000 | ---D | M] (Dust-Me Selectors) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{3c6e1eed-a07e-4c80-9cf3-66ea0bf40b37}
[2013.11.25 18:31:22 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2014.05.04 16:13:38 | 000,000,000 | ---D | M] (SEO Workers Analysis Tool) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\seoanalysistool@seoworkers
[2014.07.10 00:06:25 | 000,344,276 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi
[2014.07.18 17:08:26 | 004,218,184 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\firebug@software.joehewitt.com.xpi
[2014.05.06 19:04:04 | 000,696,321 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\toolbar@seomoz.org.xpi
[2014.07.23 20:25:24 | 000,076,615 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi
[2011.12.27 20:54:47 | 000,243,184 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi
[2014.07.11 13:33:01 | 000,092,192 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi
[2014.07.23 18:10:28 | 000,967,685 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2011.12.01 18:41:17 | 000,015,851 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{d9babd10-47de-11df-9879-0800200c9a66}.xpi
[2014.07.23 10:46:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014.07.23 10:46:25 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage:
CHR - plugin: Error reading preferences file
CHR - Extension: MozBar = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp\3.0.80_0\
CHR - Extension: Chrome Remote Desktop = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\36.0.1985.63_0\
CHR - Extension: AdBlock = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.8_0\
CHR - Extension: LiveJournal Extension = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmfgnboikinlhnaomlhalipemjbmfgi\2.5.10_0\
CHR - Extension: Google Mail Checker = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Wallet = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: MozBar = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp\3.0.80_0\
CHR - Extension: Chrome Remote Desktop = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\36.0.1985.63_0\
CHR - Extension: AdBlock = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.8_0\
CHR - Extension: LiveJournal Extension = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmfgnboikinlhnaomlhalipemjbmfgi\2.5.10_0\
CHR - Extension: Google Mail Checker = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Google Wallet = C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

O1 HOSTS File: ([2014.07.23 17:17:30 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Toolbar) - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll (Check Point Software Technologies LTD)
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies Ltd.)
O4 - Startup: C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1602808253-430055931-27258192-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1602808253-430055931-27258192-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1602808253-430055931-27258192-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Copy to Semagic - C:\Program Files (x86)\Semagic\copy.htm ()
O8:64bit: - Extra context menu item: Semagic - C:\Program Files (x86)\Semagic\link.htm ()
O8 - Extra context menu item: Copy to Semagic - C:\Program Files (x86)\Semagic\copy.htm ()
O8 - Extra context menu item: Semagic - C:\Program Files (x86)\Semagic\link.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDow ... rtScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.55.2)
O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_09)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.55.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5022B482-74BC-43B4-86D5-CA57ECE77FA8}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\gcf - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-1602808253-430055931-27258192-1001\...com [@ = ComFile] -- Reg Error: Key error. File not found
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.l3codecp - l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FFDS - ff_vfw.dll ()
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: VIDC.LAGS - lagarith.dll ( )
Drivers32:64bit: vidc.XVID - xvidvfw.dll ()
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\SysWow64\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lame - C:\Windows\SysWow64\lame.ax ()
Drivers32: msacm.scg726 - C:\Windows\SysWow64\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\Windows\SysWow64\vct3216.acm (Voxware, Inc.)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\Windows\SysWow64\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\SysWow64\i420vfw.dll (www.helixcommunity.org)
Drivers32: vidc.mp42 - C:\Windows\SysWow64\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mp43 - C:\Windows\SysWow64\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mpg4 - C:\Windows\SysWow64\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.VP60 - C:\Windows\SysWow64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWow64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP62 - C:\Windows\SysWow64\vp6vfw.dll (On2.com)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.07.25 12:51:21 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{DF1C7DE7-5350-4165-B39F-72AA03B5C72F}
[2014.07.25 11:11:15 | 000,000,000 | ---D | C] -- C:\Users\Dana\Desktop\finished
[2014.07.24 23:17:13 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{7D1631DD-21B6-460D-A668-FFE748BB8509}
[2014.07.24 12:36:35 | 004,430,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Users\Dana\Desktop\avira_en_av___ws2.exe
[2014.07.24 11:16:48 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{FBACE74B-554E-4629-A715-8D1039286701}
[2014.07.23 23:45:46 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014.07.23 23:45:39 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2014.07.23 23:27:26 | 000,000,000 | ---D | C] -- C:\ComboFix
[2014.07.23 23:15:00 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Dana\Desktop\OTL.exe
[2014.07.23 14:04:04 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014.07.23 14:04:04 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014.07.23 14:04:04 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014.07.23 14:03:54 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014.07.23 14:02:15 | 005,562,024 | R--- | C] (Swearware) -- C:\Users\Dana\Desktop\ComboFix.exe
[2014.07.23 13:41:58 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{C7AF7DD8-3B45-4D81-AF1C-2F1D2EA40705}
[2014.07.23 11:59:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2014.07.23 11:52:27 | 000,000,000 | ---D | C] -- C:\Users\Dana\Documents\vox
[2014.07.23 11:42:23 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll
[2014.07.23 10:51:08 | 000,000,000 | ---D | C] -- C:\FRST
[2014.07.23 10:46:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014.07.23 07:54:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2014.07.23 07:54:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2014.07.23 00:03:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2014.07.22 20:31:32 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{1B626FB7-A07D-41D0-B4E7-2A507B1618E0}
[2014.07.22 08:31:08 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{26435277-E1B2-4A47-98AE-854006F73428}
[2014.07.21 20:30:28 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{8F4A49D5-01D9-423D-B86D-A2214AFF56E9}
[2014.07.21 08:30:03 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{C1E84F63-2A18-47BF-8C9D-3F12E0706E71}
[2014.07.20 13:11:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
[2014.07.20 09:22:25 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{C5923A43-D6F7-4F68-ABF8-C823338C3BA1}
[2014.07.19 11:38:30 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{821C7159-BE21-4D92-9B88-2609563EF648}
[2014.07.18 23:37:53 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{37B43C52-5138-4DA2-AD62-4D54953F0DB8}
[2014.07.17 16:12:18 | 010,664,280 | ---- | C] (Martin Prikryl) -- C:\Users\Dana\Documents\WinSCP.exe
[2014.07.17 16:12:18 | 000,293,272 | ---- | C] (Martin Prikryl) -- C:\Users\Dana\Documents\WinSCP.com
[2014.07.17 15:02:21 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\LG Electronics
[2014.07.17 14:33:27 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{05B3EDC2-DC2A-4715-957B-5561B3FAD983}
[2014.07.17 14:32:34 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{2B1259D3-ACAC-4DF8-88C3-CEAD5A941EB9}
[2014.07.16 14:36:30 | 000,000,000 | ---D | C] -- C:\Users\Dana\Documents\XNALara_XPS
[2014.07.16 13:36:56 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{82267466-BB89-4C21-AEDF-655FDC5FFEDF}
[2014.07.15 21:25:51 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{8507E61B-EBFF-42CF-8F92-BE150B715EEA}
[2014.07.15 18:19:20 | 000,000,000 | ---D | C] -- C:\Users\Dana\Documents\XNALara
[2014.07.15 18:18:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
[2014.07.15 09:25:27 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{BBF4DBA5-FF5A-4D5E-BC97-EC3D26E2E5EA}
[2014.07.14 21:24:49 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{D224A22E-2B3C-4A90-8634-ABAAA591127E}
[2014.07.14 09:23:44 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{2BCD5AAC-1AE1-4C5F-BA6F-567843C666E8}
[2014.07.13 14:45:42 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{35D6D617-991C-42FE-8969-7C90E5B868D6}
[2014.07.11 21:07:17 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{0C37F603-2A19-4A4E-B336-ABD3E241A328}
[2014.07.11 14:29:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite
[2014.07.11 14:29:19 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\LG Electronics
[2014.07.11 14:26:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LG Electronics
[2014.07.11 09:06:39 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{8DF6D277-2061-48E5-A70B-60691582A3C5}
[2014.07.10 21:06:00 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{3D500043-3027-479E-9D2C-867E7EADD5D1}
[2014.07.10 09:05:08 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{68E9B0DC-144D-4AEC-BC87-35E81BC522A9}
[2014.07.09 12:05:28 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{F6666057-5914-416A-BCE4-40BB76385FEB}
[2014.07.09 08:33:54 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe
[2014.07.09 08:33:54 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe
[2014.07.09 08:33:53 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2014.07.09 08:33:53 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2014.07.09 08:33:44 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2014.07.09 08:33:36 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2014.07.09 08:33:36 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014.07.09 08:33:36 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014.07.09 08:33:35 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014.07.09 08:33:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014.07.09 08:33:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014.07.09 08:33:35 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2014.07.09 08:33:34 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2014.07.09 08:33:33 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014.07.09 08:33:33 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014.07.09 08:33:32 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014.07.09 08:33:32 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2014.07.09 08:33:32 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014.07.09 08:33:32 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014.07.09 08:33:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014.07.09 08:33:31 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014.07.09 08:33:30 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014.07.09 08:33:30 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014.07.09 08:33:29 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2014.07.09 08:33:29 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014.07.09 08:33:29 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014.07.09 08:33:28 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2014.07.09 08:33:28 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014.07.09 08:33:28 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2014.07.09 08:33:27 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2014.07.09 08:33:27 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014.07.09 08:33:27 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2014.07.09 08:33:26 | 005,721,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014.07.09 08:33:26 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014.07.09 08:33:26 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014.07.09 08:33:26 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014.07.09 08:33:26 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014.07.09 08:33:25 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014.07.09 08:33:25 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2014.07.09 08:33:24 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2014.07.09 08:32:54 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2014.07.08 21:49:42 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{62C51D8B-59F3-4651-BD34-E52AE50667EA}
[2014.07.08 09:48:37 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{8B4EE554-7EB4-4213-AA06-76539D64AB06}
[2014.07.08 08:59:09 | 000,000,000 | R--D | C] -- C:\Users\Dana\Dropbox
[2014.07.08 08:58:16 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2014.07.08 08:57:19 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\Dropbox
[2014.07.07 21:47:57 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{6DC37C8F-754F-49D6-83DA-C3A5192816DE}
[2014.07.07 09:47:28 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{79FF0519-27FD-4D0F-817D-56B188A82FB4}
[2014.07.06 20:45:30 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{4A99E58C-D710-46B4-B454-3413DE31670E}
[2014.07.06 14:44:54 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2014.07.06 14:44:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2014.07.06 14:44:51 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\Notepad++
[2014.07.06 14:44:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
[2014.07.06 08:44:35 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{51C11962-2DC7-49EE-8A2C-EB5E2B01A03E}
[2014.07.05 16:44:50 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{C3DE21B5-95E9-4623-8EB9-2FDCCC9E4DD6}
[2014.07.04 13:10:00 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{1581CD41-40BF-4CF4-9786-95CFB4727A12}
[2014.07.04 10:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2014.07.04 09:45:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2014.07.03 21:32:15 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{CF36CF98-45B1-4B1D-AD98-BDD6A994F53B}
[2014.07.03 09:31:52 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{771004D4-ED1D-4472-86FA-669696822B8E}
[2014.07.02 21:31:09 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{ED920E3F-81AC-452B-83D4-F734F640A1D2}
[2014.07.02 09:30:45 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{E6EAF983-62A1-4410-9C9C-B6CA55D6BAC9}
[2014.07.01 15:54:15 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{28550DD3-DCE6-46AC-A37F-8F7ED7CD5E60}
[2014.07.01 10:32:34 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{A4A2FA16-F4F2-44C5-B21E-7FCF5E2E925A}
[2014.06.30 20:45:35 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{F878B1C3-C382-4D1C-876E-922C10187B27}
[2014.06.30 08:45:01 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{52A59F35-C2FE-44A2-8ED0-FC53CE1611DF}
[2014.06.29 20:44:33 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{3F61B0B2-04E2-4A3C-A63A-0B4297D6C66E}
[2014.06.29 10:08:33 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Inkscape-0.48
[2014.06.29 10:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape-0.48
[2014.06.29 10:08:33 | 000,000,000 | ---D | C] -- C:\Program Files\Inkscape-0.48
[2014.06.29 08:43:24 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{08BA9314-C58B-4FBE-9547-B06A5D400446}
[2014.06.27 10:12:27 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Local\{57216CEB-CB28-4E01-B365-81398538C26A}
[2014.06.26 14:55:51 | 000,000,000 | ---D | C] -- C:\Users\Dana\AppData\Roaming\PilotEdit
[2014.06.26 14:55:49 | 000,000,000 | ---D | C] -- C:\Program Files\PilotEdit x64
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014.07.26 11:09:18 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.07.26 10:47:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.07.26 10:44:00 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job
[2014.07.26 10:42:31 | 000,574,544 | ---- | M] () -- C:\Users\Dana\Desktop\living_room_base_shot_by_xxflamerunnerxx-d7cxy7d.jpg
[2014.07.26 10:32:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.07.26 09:58:41 | 003,913,790 | ---- | M] () -- C:\Users\Dana\Desktop\Living Furniture Pack (BGT).rar
[2014.07.26 09:12:53 | 002,516,498 | ---- | M] () -- C:\Users\Dana\Desktop\ac__apple_of_eden___replica_edition_by_decanandersen-d5jiwwt.zip
[2014.07.26 09:12:47 | 000,015,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.07.26 09:12:47 | 000,015,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.07.26 09:05:13 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.07.26 09:04:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.07.26 09:04:45 | 3220,578,304 | -HS- | M] () -- C:\hiberfil.sys
[2014.07.25 18:44:01 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job
[2014.07.25 18:00:00 | 000,000,464 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
[2014.07.25 15:55:11 | 350,337,456 | ---- | M] () -- C:\Users\Dana\Desktop\zasilka-AIABGT4BYTTRUZVP.zip
[2014.07.25 11:43:00 | 457,889,305 | ---- | M] () -- C:\Users\Dana\Desktop\zasilka-AILJUX394UUB9567.zip
[2014.07.24 12:36:39 | 004,430,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Users\Dana\Desktop\avira_en_av___ws2.exe
[2014.07.23 23:15:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dana\Desktop\OTL.exe
[2014.07.23 17:17:30 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2014.07.23 14:02:19 | 005,562,024 | R--- | M] (Swearware) -- C:\Users\Dana\Desktop\ComboFix.exe
[2014.07.23 13:34:52 | 001,222,144 | ---- | M] () -- C:\Users\Dana\Desktop\RSITx64.exe
[2014.07.23 12:59:06 | 000,000,927 | ---- | M] () -- C:\Users\Dana\Desktop\Steam.lnk
[2014.07.23 11:59:23 | 000,003,075 | ---- | M] () -- C:\Users\Dana\Desktop\XNALara.lnk
[2014.07.22 21:04:49 | 000,001,010 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014.07.22 14:58:20 | 000,014,235 | ---- | M] () -- C:\Users\Dana\Documents\WinSCP.ini
[2014.07.22 14:58:20 | 000,000,600 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\winscp.rnd
[2014.07.17 08:27:25 | 003,830,688 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.07.15 17:21:23 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014.07.15 17:21:17 | 000,281,392 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2014.07.15 17:21:17 | 000,281,392 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014.07.13 09:50:49 | 000,000,236 | ---- | M] () -- C:\.htaccess
[2014.07.09 11:32:09 | 000,699,056 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014.07.09 11:32:09 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014.07.08 12:43:02 | 026,943,026 | ---- | M] () -- C:\Users\Dana\Documents\broadcast (01).mp4
[2014.07.04 10:41:16 | 000,002,172 | ---- | M] () -- C:\Users\Dana\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2014.07.03 15:38:49 | 000,007,391 | ---- | M] () -- C:\Users\Dana\AppData\Local\recently-used.xbel
[2014.07.01 23:25:35 | 086,133,575 | ---- | M] () -- C:\Users\Dana\Documents\broadcast.mp4
[2014.06.30 12:31:43 | 000,000,975 | ---- | M] () -- C:\Users\Public\Desktop\PROFIT.lnk
[2014.06.28 14:04:17 | 001,584,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014.06.28 14:04:17 | 000,670,658 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2014.06.28 14:04:17 | 000,654,812 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014.06.28 14:04:17 | 000,142,270 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2014.06.28 14:04:17 | 000,122,684 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.07.26 10:42:30 | 000,574,544 | ---- | C] () -- C:\Users\Dana\Desktop\living_room_base_shot_by_xxflamerunnerxx-d7cxy7d.jpg
[2014.07.26 09:58:35 | 003,913,790 | ---- | C] () -- C:\Users\Dana\Desktop\Living Furniture Pack (BGT).rar
[2014.07.26 09:12:49 | 002,516,498 | ---- | C] () -- C:\Users\Dana\Desktop\ac__apple_of_eden___replica_edition_by_decanandersen-d5jiwwt.zip
[2014.07.26 08:36:22 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.07.25 15:53:52 | 350,337,456 | ---- | C] () -- C:\Users\Dana\Desktop\zasilka-AIABGT4BYTTRUZVP.zip
[2014.07.25 11:41:24 | 457,889,305 | ---- | C] () -- C:\Users\Dana\Desktop\zasilka-AILJUX394UUB9567.zip
[2014.07.23 14:04:04 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014.07.23 14:04:04 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014.07.23 14:04:04 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014.07.23 14:04:04 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014.07.23 14:04:04 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014.07.23 13:34:37 | 001,222,144 | ---- | C] () -- C:\Users\Dana\Desktop\RSITx64.exe
[2014.07.23 12:59:06 | 000,000,927 | ---- | C] () -- C:\Users\Dana\Desktop\Steam.lnk
[2014.07.23 11:59:23 | 000,003,075 | ---- | C] () -- C:\Users\Dana\Desktop\XNALara.lnk
[2014.07.22 21:04:49 | 000,001,010 | ---- | C] () -- C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014.07.17 16:48:40 | 000,000,600 | ---- | C] () -- C:\Users\Dana\AppData\Roaming\winscp.rnd
[2014.07.17 16:12:23 | 000,014,235 | ---- | C] () -- C:\Users\Dana\Documents\WinSCP.ini
[2014.07.13 09:50:49 | 000,000,236 | ---- | C] () -- C:\.htaccess
[2014.07.08 12:41:35 | 026,943,026 | ---- | C] () -- C:\Users\Dana\Documents\broadcast (01).mp4
[2014.07.04 10:41:16 | 000,002,172 | ---- | C] () -- C:\Users\Dana\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2014.07.03 15:38:49 | 000,007,391 | ---- | C] () -- C:\Users\Dana\AppData\Local\recently-used.xbel
[2014.07.01 23:20:47 | 086,133,575 | ---- | C] () -- C:\Users\Dana\Documents\broadcast.mp4
[2014.06.08 23:24:13 | 000,000,097 | ---- | C] () -- C:\Users\Dana\AppData\Roaming\LauncherSettings_live.cfg
[2013.09.24 11:19:09 | 000,000,048 | ---- | C] () -- C:\Users\Dana\.jupload.properties
[2013.09.22 15:52:17 | 000,524,288 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2013.09.22 15:52:17 | 000,139,264 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2013.07.11 14:11:59 | 000,032,256 | -HS- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2013.05.24 16:37:16 | 000,003,584 | ---- | C] () -- C:\Users\Dana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.03.01 03:47:36 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2012.12.28 00:26:11 | 000,004,697 | ---- | C] () -- C:\Users\Dana\AppData\Local\Temp5.html
[2011.11.04 16:25:29 | 000,000,600 | ---- | C] () -- C:\Users\Dana\AppData\Local\PUTTY.RND
[2011.10.20 19:27:20 | 000,000,068 | ---- | C] () -- C:\Users\Dana\psv.ini

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014.03.25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014.03.25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011.10.26 17:54:39 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\.kde
[2014.07.25 17:03:11 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\.minecraft
[2012.02.03 14:28:59 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\602Installer
[2012.02.03 14:29:47 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\602XML
[2014.07.26 11:09:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\AIMP3
[2012.12.21 15:35:19 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Amazon
[2013.01.09 15:20:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Anvsoft
[2012.01.09 12:44:44 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Ashampoo
[2014.02.18 17:40:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Audacity
[2014.03.11 18:30:19 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\avidemux
[2012.10.23 14:06:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Avnex
[2013.02.13 16:52:10 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\backup.minecraft
[2011.10.14 18:01:26 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Bitstream
[2012.12.21 15:42:04 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\calibre
[2011.12.03 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013.04.27 00:06:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Check Point Software Technologies LTD
[2012.03.27 11:36:14 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\CheckPoint
[2014.02.06 16:36:20 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.air.settings.manager
[2013.06.19 11:53:59 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.air.settings.manager.419D633A757E8B26DD2BDB301927BA7BA7490F38.1
[2011.12.03 20:02:06 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2014.02.16 10:15:31 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\deluge
[2014.04.26 18:20:02 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\DigitalTheatrePlayer
[2011.12.13 18:06:30 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\DigitalTheatrePlayer.50FAA36E94B2E1439B0A75CE1D37D773E96BC306.1
[2014.07.26 09:06:27 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Dropbox
[2012.12.21 15:05:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Epubsoft
[2012.07.18 17:59:41 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\EurekaLog
[2014.07.25 17:00:20 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\FileZilla
[2013.04.28 10:20:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Foxit Software
[2011.10.23 20:33:30 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Foxmail
[2012.01.05 17:49:00 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\gtk-2.0
[2014.06.29 10:11:36 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\inkscape
[2012.10.22 10:15:53 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Inspyder Sitemap Creator
[2011.12.21 14:35:32 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\IsolatedStorage
[2014.07.17 15:02:21 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\LG Electronics
[2012.09.14 18:50:06 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\MegaCloud
[2014.03.11 14:01:50 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\MPEG Streamclip
[2013.06.24 21:42:02 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Nokia
[2013.06.24 21:41:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Nokia Suite
[2014.07.06 15:22:57 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Notepad++
[2014.01.05 14:20:26 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OBS
[2013.10.18 13:56:17 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OfficeRecovery
[2014.07.26 09:05:54 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OnTranslator
[2013.12.03 17:29:36 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OpenOffice
[2013.09.23 15:07:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Opera Software
[2012.08.30 20:52:17 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PC Suite
[2013.03.15 19:49:56 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PDF Writer
[2013.01.09 15:20:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PhotoScape
[2014.07.03 14:46:40 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PilotEdit
[2011.12.24 23:29:14 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Prison Break
[2012.06.13 18:29:48 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PunkBuster
[2011.10.26 18:01:13 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Songbird2
[2011.11.25 22:50:38 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Spacejock Software
[2012.08.13 22:06:22 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\StepMania 5
[2012.06.13 22:48:49 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\SystemRequirementsLab
[2014.06.08 23:23:05 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\theHunterSteam
[2011.10.06 19:30:44 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Thunderbird
[2014.02.10 17:32:50 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\TimeMaker
[2012.06.02 22:32:32 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Trillian
[2014.03.07 22:18:28 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\TS3Client
[2013.04.06 21:30:58 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\ts3overlay
[2012.10.24 21:25:29 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\ts3overlay_hook_win64
[2012.06.06 23:29:01 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Ubisoft
[2014.04.26 22:47:56 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Unity
[2014.03.11 16:50:49 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\VideoEditor
[2011.10.23 20:53:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Windows Live Writer
[2014.01.23 21:33:01 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Wireshark
[2014.04.17 16:49:48 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Wuala

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,032,558 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.07.18 16:14:43 | 000,000,464 | ---- | C] () -- C:\Windows\Tasks\ParetoLogic Registration.job
[2012.12.01 11:37:47 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014.02.12 15:26:55 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.02.12 15:26:56 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.02.14 10:21:27 | 000,000,906 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job
[2014.02.14 10:21:28 | 000,000,958 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job

< >

< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\erdnt\cache64\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\erdnt\cache86\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\erdnt\cache64\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2012.04.24 06:36:42 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=06E771AA596B8761107AB57E99F128D7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17827_none_77ff39f3f916c65f\cryptsvc.dll
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2012.04.24 06:28:22 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=21993009E0CCB9B4FA195F14D3408626 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.21979_none_7854c7b7125b248c\cryptsvc.dll
[2013.05.10 06:49:59 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=33ADF6E0853AB39EA1723BE82842C1D3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll
[2013.05.13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013.07.09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2012.06.02 07:32:25 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=456107D69D4EE850A559434F19EFEE65 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_d2beeccacd6d6c07\cryptsvc.dll
[2012.04.24 07:37:37 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=4F5414602E2544A4554D95517948B705 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17827_none_d41dd577b1743795\cryptsvc.dll
[2013.10.05 04:25:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=509D31797A4B8A3D6ED78A330B19A919 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_d46d4138cabe2596\cryptsvc.dll
[2012.04.24 06:47:04 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=520A108A2657F4BCA7FCED9CA7D885DE -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17008_none_762f534bfbdf7203\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\erdnt\cache64\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013.07.09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\erdnt\cache86\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012.06.04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013.05.10 07:49:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=7FDC4626B01106A8EF328C88C7C0DEE3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll
[2013.05.11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2009.07.14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012.06.02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013.05.11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2012.04.24 07:22:32 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=B7337E9C9E5936355BB700AA33E0936E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.21979_none_d473633acab895c2\cryptsvc.dll
[2012.06.02 07:25:12 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=BAF19B633933A9FB4883D27D66C39E9A -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_d22a7e2db457eb07\cryptsvc.dll
[2013.05.10 07:18:53 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=CA13C4F92BEE66DB48E58AB3223DDF6E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll
[2012.04.24 07:36:46 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=CE8BF1423AEE47DA5275FBC8AD3BD642 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21199_none_d2773c98cda297d3\cryptsvc.dll
[2013.05.13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2013.05.10 07:06:21 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=E122AA1C9A3CC46FF9DDDE46E5EB0C58 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2012.04.24 07:59:45 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=F02786B66375292E58C8777082D4396D -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17008_none_d24deecfb43ce339\cryptsvc.dll
[2013.10.05 03:52:03 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=F2D9242C3BBD1C36467FCAE1AE01733F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_784ea5b51260b460\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll
[2012.04.24 06:33:53 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=F522279B4717E2BFF269C771FAC2B78E -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21199_none_7658a1151545269d\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2009.12.20 00:00:00 | 000,037,520 | ---- | M] (perl.org) MD5=2852D57385C4709EAAE2F9DB01AD3672 -- C:\xampp\perl\site\lib\auto\Win32\EventLog\EventLog.dll
[2013.03.12 15:00:10 | 000,025,600 | ---- | M] () MD5=3296A6B39A35330F1734A79B20B89FDE -- C:\xampp\perl\vendor\lib\auto\Win32\EventLog\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\erdnt\cache86\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2014.05.30 10:00:12 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=04F6C08B30C599D301CE8530A6F6A703 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22705_none_0505e8508c7f766f\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011.11.17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\erdnt\cache64\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\SysNative\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18443_none_044f07757384196d\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18496_none_041bf8b773a9f127\lsass.exe
[2013.09.25 03:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=4D71227301DD8D09097B9E4CC6527E5A -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_042b9307739f26ed\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22653_none_04cdd63a8ca9d24f\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22712_none_04f817868c8a465b\lsass.exe
[2012.08.24 19:43:36 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=77119F1F9B492B260030C34F9BE327FA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22099_none_04a88ce28cc4eb33\lsass.exe
[2012.06.04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2012.06.02 07:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17940_none_044c26dd7386a58a\lsass.exe
[2011.11.17 08:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe
[2013.09.25 03:08:17 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=F021DAFB1F87616FCEBA159C2ED7042F -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_04c503168cb026a0\lsass.exe
[2014.05.30 10:07:57 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=F23812F9F7B130854E4BC0389F7C688C -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18489_none_0429c981739f213b\lsass.exe

< MD5 for: NDIS.SYS >
[2012.08.22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012.08.22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\erdnt\cache64\ndis.sys
[2012.08.22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012.08.22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\erdnt\cache64\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache86\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009.07.14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011.03.11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011.03.11 08:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011.03.11 08:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\erdnt\cache86\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\erdnt\cache64\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22653_none_0abdf375491039d3\smss.exe
[2013.03.19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013.03.19 05:20:12 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=7180204786A9DED8723B2D8CF3CDD388 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_08a94e494c0cfd0a\smss.exe
[2013.08.29 03:04:30 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=B2B31D4C79EFD883097FA24D02E79C12 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22436_none_0ad6905f48fd53a8\smss.exe
[2013.08.02 07:06:34 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CB5DA3E44456D1084BCD87F5B1B3152B -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe
[2013.07.08 04:50:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=E65601CF4BC0CF3718AFBE56A9AD846F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22379_none_0aae4fa7491b124a\smss.exe
[2013.03.19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\SysNative\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe
[2013.03.19 05:19:03 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=FA64733BD65F52712F0545F56FDB4BE6 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_0838504e32dc743c\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\erdnt\cache86\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\erdnt\cache64\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\erdnt\cache64\tcpip.sys
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2011.04.25 07:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2011.09.29 19:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2013.05.08 08:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2013.09.08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.06.21 08:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
[2012.03.30 12:19:17 | 001,877,872 | ---- | M] (Microsoft Corporation) MD5=5EFD096DEF47F8B88EF591DA92143440 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_0faa5514992a39a7\tcpip.sys
[2011.04.25 07:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2012.03.30 13:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_0f140fa780164fde\tcpip.sys
[2013.09.07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2012.08.22 20:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2010.04.09 13:06:28 | 001,898,376 | ---- | M] (Microsoft Corporation) MD5=7FC877A25796D8ADF539E64703FCA7E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_0f2ca8c580036f65\tcpip.sys
[2012.03.30 12:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011.04.25 07:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2013.05.08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2011.06.21 08:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2010.04.09 09:56:29 | 001,892,232 | ---- | M] (Microsoft Corporation) MD5=A9C0F786AC1F736891D05CE0A1D29DEB -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_0f9ea52499331463\tcpip.sys
[2011.09.29 18:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
[2012.03.30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2011.04.25 08:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.06.21 08:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
[2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2011.06.21 08:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
[2011.09.29 18:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
[2013.11.26 13:34:34 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=F55B41AA6114568AC558ADBABDA85620 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22525_none_11c3cc3c962abcc3\tcpip.sys
[2012.08.22 20:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys
[2011.09.29 18:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\erdnt\cache86\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\erdnt\cache64\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014.03.04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\erdnt\cache64\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\SysNative\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\erdnt\cache64\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\erdnt\cache86\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[15 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[15 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\*.tmp -> ]
[5 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.10.26 17:54:39 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\.kde
[2014.07.25 17:03:11 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\.minecraft
[2012.02.03 14:28:59 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\602Installer
[2012.02.03 14:29:47 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\602XML
[2012.01.19 12:30:00 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Adobe
[2014.07.26 11:19:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\AIMP3
[2012.12.21 15:35:19 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Amazon
[2013.01.09 15:20:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Anvsoft
[2013.08.06 16:57:53 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Apple Computer
[2012.01.09 12:44:44 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Ashampoo
[2014.02.18 17:40:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Audacity
[2014.03.11 18:30:19 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\avidemux
[2012.10.23 14:06:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Avnex
[2013.02.13 16:52:10 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\backup.minecraft
[2011.10.14 18:01:26 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Bitstream
[2012.12.21 15:42:04 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\calibre
[2011.12.03 22:31:09 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013.04.27 00:06:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Check Point Software Technologies LTD
[2012.03.27 11:36:14 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\CheckPoint
[2014.02.06 16:36:20 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.air.settings.manager
[2013.06.19 11:53:59 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.air.settings.manager.419D633A757E8B26DD2BDB301927BA7BA7490F38.1
[2011.12.03 20:02:06 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.08.27 20:15:16 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Corel
[2014.02.16 10:15:31 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\deluge
[2014.04.26 18:20:02 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\DigitalTheatrePlayer
[2011.12.13 18:06:30 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\DigitalTheatrePlayer.50FAA36E94B2E1439B0A75CE1D37D773E96BC306.1
[2011.09.29 13:36:33 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Digsby
[2014.07.26 09:06:27 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Dropbox
[2014.04.06 14:24:08 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\DVD Flick
[2012.12.21 15:05:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Epubsoft
[2012.07.18 17:59:41 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\EurekaLog
[2014.07.25 17:00:20 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\FileZilla
[2013.04.28 10:20:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Foxit Software
[2011.10.23 20:33:30 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Foxmail
[2012.10.24 13:59:52 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Google
[2012.01.05 17:49:00 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\gtk-2.0
[2011.09.28 21:51:22 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Identities
[2014.06.29 10:11:36 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\inkscape
[2012.10.22 10:15:53 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Inspyder Sitemap Creator
[2012.02.03 14:29:11 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\InstallShield
[2011.12.21 14:35:32 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\IsolatedStorage
[2014.07.17 15:02:21 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\LG Electronics
[2011.09.28 22:10:36 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Macromedia
[2013.09.24 08:42:13 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Malwarebytes
[2009.07.14 09:45:37 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Media Center Programs
[2014.06.08 12:01:47 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Media Player Classic
[2012.09.14 18:50:06 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\MegaCloud
[2013.10.12 09:45:26 | 000,000,000 | --SD | M] -- C:\Users\Dana\AppData\Roaming\Microsoft
[2011.09.28 21:55:31 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Mozilla
[2014.03.11 14:01:50 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\MPEG Streamclip
[2013.06.24 21:42:02 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Nokia
[2013.06.24 21:41:34 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Nokia Suite
[2014.07.06 15:22:57 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Notepad++
[2014.04.16 12:18:24 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\NVIDIA
[2014.01.05 14:20:26 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OBS
[2013.10.18 13:56:17 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OfficeRecovery
[2014.07.26 09:05:54 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OnTranslator
[2013.12.03 17:29:36 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\OpenOffice
[2013.09.23 15:07:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Opera Software
[2012.08.30 20:52:17 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PC Suite
[2013.03.15 19:49:56 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PDF Writer
[2013.01.09 15:20:51 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PhotoScape
[2014.07.03 14:46:40 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PilotEdit
[2011.12.24 23:29:14 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Prison Break
[2013.12.02 17:30:07 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PSpad
[2012.06.13 18:29:48 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\PunkBuster
[2012.03.29 18:20:35 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\RealWorld
[2014.07.12 17:10:17 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Skype
[2011.10.26 18:01:13 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Songbird2
[2011.11.25 22:50:38 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Spacejock Software
[2012.08.13 22:06:22 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\StepMania 5
[2012.06.13 22:48:49 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\SystemRequirementsLab
[2014.06.08 23:23:05 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\theHunterSteam
[2011.10.06 19:30:44 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Thunderbird
[2014.02.10 17:32:50 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\TimeMaker
[2012.06.02 22:32:32 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Trillian
[2014.03.07 22:18:28 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\TS3Client
[2013.04.06 21:30:58 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\ts3overlay
[2012.10.24 21:25:29 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\ts3overlay_hook_win64
[2012.06.06 23:29:01 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Ubisoft
[2014.04.26 22:47:56 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Unity
[2014.03.11 16:50:49 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\VideoEditor
[2012.05.27 17:40:05 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\VMware
[2011.10.23 20:53:46 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Windows Live Writer
[2011.10.09 16:05:39 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\WinRAR
[2014.01.23 21:33:01 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Wireshark
[2014.04.17 16:49:48 | 000,000,000 | ---D | M] -- C:\Users\Dana\AppData\Roaming\Wuala

< %APPDATA%\*.exe /s >
[2013.07.12 12:23:14 | 002,028,089 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\.minecraft\mcpatcher-4.1.0_04.exe
[2014.07.20 13:10:30 | 007,771,936 | ---- | M] (AIMP DevTeam) -- C:\Users\Dana\AppData\Roaming\AIMP3\UpdateInstaller.exe
[2011.01.05 09:04:00 | 000,742,111 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\Anvsoft\Photo Slideshow Maker Free Version\template\premium\swftools\as3compile.exe
[2014.07.21 23:02:50 | 035,464,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2014.07.21 23:06:00 | 000,262,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2014.07.21 23:02:54 | 000,280,640 | ---- | M] (Dropbox, Inc.) -- C:\Users\Dana\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2014.04.14 15:51:51 | 000,054,432 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Dana\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2012.08.30 21:10:25 | 000,053,248 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\ARPPRODUCTICON.exe
[2012.08.30 21:10:25 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
[2012.08.30 21:10:25 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
[2012.08.30 21:10:25 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
[2012.08.30 21:10:25 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe
[2011.09.28 22:43:24 | 000,010,134 | R--- | M] () -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}\ARPPRODUCTICON.exe
[2011.09.28 22:43:24 | 000,065,536 | R--- | M] (InstallShield Software Corp.) -- C:\Users\Dana\AppData\Roaming\Microsoft\Installer\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe
[2014.05.10 12:36:53 | 000,155,648 | ---- | M] (obsproject.com) -- C:\Users\Dana\AppData\Roaming\OBS\updates\updater.exe
[2012.12.30 10:45:27 | 002,034,750 | ---- | M] () -- C:\Users\Dana\AppData\Roaming\OnTranslator\Updates\OnTranslator_1.0.140.exe
[2011.02.17 23:46:25 | 000,835,440 | R--- | M] () -- C:\Users\Dana\AppData\Roaming\PunkBuster\pbsetup\pbsvc.exe
[2014.06.17 19:09:09 | 001,421,429 | ---- | M] (Spacejock Software ) -- C:\Users\Dana\AppData\Roaming\Spacejock Software\yWriter5\yWriter5Upd.exe
[2014.04.17 16:47:40 | 000,453,552 | ---- | M] (LaCie) -- C:\Users\Dana\AppData\Roaming\Wuala\Wuala.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 15:25:17 | 001,475,584 | ---- | M] (Microsoft Corporation)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.07.26 11:09:18 | 000,000,512 | ---- | M] () MD5=CD5111FAB3E430DA169713F2B5209EDB -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2005.03.08 11:30:56 | 000,092,827 | ---- | M] () -- \Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Custom Data\Bumpmap\Cracks.cpt
[2005.03.08 11:30:58 | 000,016,068 | ---- | M] () -- \Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Custom Data\Canvas\cracks2c.pcx
[2005.03.08 11:31:08 | 000,010,560 | ---- | M] () -- \Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Custom Data\Tiles\CRACKS2M.CPT
[2014.03.21 16:07:55 | 000,015,024 | ---- | M] () -- \Program Files (x86)\DontStarve\data\anim\nightmare_crack_ruins.zip
[2014.03.21 16:07:53 | 000,033,633 | ---- | M] () -- \Program Files (x86)\DontStarve\data\anim\nightmare_crack_ruins_fx.zip
[2014.03.21 16:07:57 | 000,015,152 | ---- | M] () -- \Program Files (x86)\DontStarve\data\anim\nightmare_crack_upper.zip
[2014.03.21 16:08:01 | 000,033,514 | ---- | M] () -- \Program Files (x86)\DontStarve\data\anim\nightmare_crack_upper_fx.zip
[2014.03.21 16:07:56 | 000,004,615 | ---- | M] () -- \Program Files (x86)\DontStarve\data\scripts\components\wisecracker.lua
[2014.03.21 16:08:06 | 001,398,246 | ---- | M] () -- \Program Files (x86)\DontStarve\mods\screecher\levels\textures\noise_cracked.tex
[2013.11.30 18:27:56 | 000,062,238 | ---- | M] () -- \Program Files\GIMP 2\share\gimp\2.0\patterns\cracked.pat
[2013.09.09 19:06:54 | 000,119,897 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\site-packages\numpy\f2py\crackfortran.py
[2013.06.21 15:26:58 | 000,011,241 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\resourcepacks\minecraft\textures\blocks\stonebrick_cracked.png
[2014.03.21 15:58:00 | 000,015,024 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\data\anim\nightmare_crack_ruins.zip
[2014.03.21 15:56:51 | 000,033,633 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\data\anim\nightmare_crack_ruins_fx.zip
[2014.03.21 16:00:43 | 000,015,152 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\data\anim\nightmare_crack_upper.zip
[2014.03.21 16:03:10 | 000,033,514 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\data\anim\nightmare_crack_upper_fx.zip
[2014.03.21 15:58:59 | 000,004,615 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\data\scripts\components\wisecracker.lua
[2014.03.21 16:04:55 | 001,398,246 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\__temp__\mods\screecher\levels\textures\noise_cracked.tex
[2013.09.29 16:27:42 | 000,021,319 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\anim\nightmare_crack_base.zip
[2014.03.21 15:58:00 | 000,015,014 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\anim\nightmare_crack_ruins.zip
[2014.03.21 15:56:51 | 000,032,831 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\anim\nightmare_crack_ruins_fx.zip
[2014.03.21 16:00:43 | 000,015,160 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\anim\nightmare_crack_upper.zip
[2014.03.21 16:03:10 | 000,032,749 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\anim\nightmare_crack_upper_fx.zip
[2014.03.21 15:58:59 | 000,001,190 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\data\scripts\components\wisecracker.lua
[2014.03.21 16:04:55 | 000,623,520 | ---- | M] () -- \Users\Dana\Documents\Klei\DoNotStarve\UpdaterCache\mods\screecher\levels\textures\noise_cracked.tex
[2011.04.15 10:51:38 | 000,061,862 | ---- | M] () -- \Users\Dana\Documents\prace\!grafika_ostatni\draw_brushes\Brushes Sample\Cracks.cmx
[2009.04.09 09:07:44 | 000,611,474 | ---- | M] () -- \Users\Dana\Documents\prace\!grafika_ostatni\draw_brushes\brushesx3\Cracks1.cdr
[2009.06.18 19:57:32 | 000,530,590 | ---- | M] () -- \Users\Dana\Documents\prace\!grafika_ostatni\draw_brushes\brushesx3\Cracks1x3.cdr
[2010.01.14 16:07:22 | 006,487,420 | ---- | M] () -- \Users\Dana\Music\Snow Patrol\Up To Now Disc 1\03 Crack the Shutters.mp3
[2011.09.16 16:43:14 | 001,053,798 | ---- | M] () -- \Users\Dana\Pictures\funny-gifs-im-on-crack.gif
[2011.10.05 22:04:18 | 001,204,127 | ---- | M] () -- \Users\Dana\Pictures\POTO\phantomoftheopera2004bycrackified.zip

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2011.08.27 04:02:08 | 000,002,331 | ---- | M] () -- \ComplexWebServer\http_users\lcms\core\controller\ModuleLoaderController.php
[2011.08.27 04:02:08 | 000,001,012 | ---- | M] () -- \ComplexWebServer\http_users\lcms\core\lib\ModuleLoader.php
[2011.08.27 04:02:08 | 000,000,191 | ---- | M] () -- \ComplexWebServer\http_users\lcms\core\model\ModuleLoaderModel.php
[2011.08.27 04:02:08 | 000,000,087 | ---- | M] () -- \ComplexWebServer\http_users\lcms\core\view\ModuleLoaderView.php
[2011.08.27 04:02:08 | 000,000,913 | ---- | M] () -- \ComplexWebServer\http_users\lcms\modules\lrte\code\uploader.php
[2010.06.12 19:09:00 | 000,002,213 | ---- | M] () -- \ComplexWebServer\http_users\lotus3.0.5\core\controller\ModuleLoaderController.php
[2010.06.13 23:47:42 | 000,000,926 | ---- | M] () -- \ComplexWebServer\http_users\lotus3.0.5\core\lib\ModuleLoader.php
[2010.06.12 18:38:20 | 000,001,779 | ---- | M] () -- \ComplexWebServer\http_users\lotus3.0.5\core\model\ModuleLoaderModel.php
[2010.06.12 18:38:54 | 000,000,219 | ---- | M] () -- \ComplexWebServer\http_users\lotus3.0.5\core\view\ModuleLoaderView.php
[2011.02.23 14:12:14 | 000,000,913 | ---- | M] () -- \ComplexWebServer\http_users\lotus3.0.5\modules\lrte\code\uploader.php
[2011.09.10 22:42:54 | 000,001,647 | ---- | M] () -- \ComplexWebServer\http_users\opencart_v1.5.1.3.1\system\engine\loader.php
[2011.10.13 20:01:41 | 000,003,208 | ---- | M] () -- \ComplexWebServer\http_users\portfolio\backup\graphics\loader.big.black.gif
[2011.10.13 20:01:41 | 000,003,208 | ---- | M] () -- \ComplexWebServer\http_users\portfolio\backup\graphics\loader.big.white.gif
[2011.10.13 20:01:41 | 000,000,668 | ---- | M] () -- \ComplexWebServer\http_users\portfolio\backup\graphics\loader.black.gif
[2011.10.13 20:01:41 | 000,000,673 | ---- | M] () -- \ComplexWebServer\http_users\portfolio\backup\graphics\loader.white.gif
[2010.01.13 21:31:56 | 000,003,208 | ---- | M] () -- \ComplexWebServer\http_users\wb\modules\bakery\images\loader.gif
[2011.08.27 04:02:08 | 000,002,331 | ---- | M] () -- \http_users\lcms\core\controller\ModuleLoaderController.php
[2011.08.27 04:02:08 | 000,001,012 | ---- | M] () -- \http_users\lcms\core\lib\ModuleLoader.php
[2011.08.27 04:02:08 | 000,000,191 | ---- | M] () -- \http_users\lcms\core\model\ModuleLoaderModel.php
[2011.08.27 04:02:08 | 000,000,087 | ---- | M] () -- \http_users\lcms\core\view\ModuleLoaderView.php
[2011.08.27 04:02:08 | 000,000,913 | ---- | M] () -- \http_users\lcms\modules\lrte\code\uploader.php
[2010.06.12 19:09:00 | 000,002,213 | ---- | M] () -- \http_users\lotus3.0.5\core\controller\ModuleLoaderController.php
[2010.06.13 23:47:42 | 000,000,926 | ---- | M] () -- \http_users\lotus3.0.5\core\lib\ModuleLoader.php
[2010.06.12 18:38:20 | 000,001,779 | ---- | M] () -- \http_users\lotus3.0.5\core\model\ModuleLoaderModel.php
[2010.06.12 18:38:54 | 000,000,219 | ---- | M] () -- \http_users\lotus3.0.5\core\view\ModuleLoaderView.php
[2011.02.23 14:12:14 | 000,000,913 | ---- | M] () -- \http_users\lotus3.0.5\modules\lrte\code\uploader.php
[2011.09.10 22:42:54 | 000,001,647 | ---- | M] () -- \http_users\opencart_v1.5.1.3.1\system\engine\loader.php
[2011.10.13 20:01:41 | 000,003,208 | ---- | M] () -- \http_users\portfolio\backup\graphics\loader.big.black.gif
[2011.10.13 20:01:41 | 000,003,208 | ---- | M] () -- \http_users\portfolio\backup\graphics\loader.big.white.gif
[2011.10.13 20:01:41 | 000,000,668 | ---- | M] () -- \http_users\portfolio\backup\graphics\loader.black.gif
[2011.10.13 20:01:41 | 000,000,673 | ---- | M] () -- \http_users\portfolio\backup\graphics\loader.white.gif
[2010.01.13 21:31:56 | 000,003,208 | ---- | M] () -- \http_users\wb\modules\bakery\images\loader.gif
[2013.07.27 10:39:05 | 001,152,288 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce320.49Driver\ExtensionLoader.dll
[2013.05.16 16:41:22 | 001,152,288 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce320.49Driver\GFExperience\ExtensionLoader.dll
[2013.08.27 23:16:20 | 001,177,888 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce327.23Driver\ExtensionLoader.dll
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce327.23Driver\GFExperience\ExtensionLoader.dll
[2013.12.10 04:13:27 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce334.89Driver\ExtensionLoader.dll
[2014.02.05 11:31:23 | 001,169,184 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce334.89Driver\GFExperience\ExtensionLoader.dll
[2013.12.10 04:13:27 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce335.23Driver\ExtensionLoader.dll
[2014.02.05 11:31:23 | 001,169,184 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForce335.23Driver\GFExperience\ExtensionLoader.dll
[2013.11.08 22:45:57 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForceR331GameReadyDriver\ExtensionLoader.dll
[2013.12.10 04:13:27 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForceR331Game-Ready-Driver\ExtensionLoader.dll
[2013.11.14 13:56:55 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForceR331GameReadyDriver\GFExperience\ExtensionLoader.dll
[2013.12.10 04:15:46 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\GeForceR331Game-Ready-Driver\GFExperience\ExtensionLoader.dll
[2011.10.06 15:12:10 | 000,035,734 | ---- | M] () -- \old_htdocs\concrete\concrete\flash\uploader\uploader.swf
[2012.04.27 19:46:51 | 000,002,513 | ---- | M] () -- \old_htdocs\joomla\administrator\components\com_phocagallery\libraries\loader.php
[2012.04.27 19:46:49 | 000,000,668 | ---- | M] () -- \old_htdocs\joomla\components\com_phocagallery\assets\js\highslide\graphics\loader.gif
[2012.04.27 19:46:49 | 000,000,673 | ---- | M] () -- \old_htdocs\joomla\components\com_phocagallery\assets\js\highslide\graphics\loader.white.gif
[2012.04.27 15:49:23 | 000,007,773 | ---- | M] () -- \old_htdocs\joomla\libraries\loader.php
[2012.03.14 15:49:44 | 000,001,786 | ---- | M] () -- \old_htdocs\joomla\libraries\cms\cmsloader.php
[2012.03.14 15:49:44 | 000,000,584 | ---- | M] () -- \old_htdocs\joomla\media\system\images\mootree_loader.gif
[2012.04.27 15:49:24 | 000,006,278 | ---- | M] () -- \old_htdocs\joomla\media\system\js\uploader-uncompressed.js
[2012.04.27 15:49:24 | 000,005,024 | ---- | M] () -- \old_htdocs\joomla\media\system\js\uploader.js
[2012.03.14 15:49:44 | 000,010,222 | ---- | M] () -- \old_htdocs\joomla\media\system\swf\uploader.swf
[2010.06.12 20:09:00 | 000,002,213 | ---- | M] () -- \old_htdocs\lotus\core\controller\ModuleLoaderController.php
[2010.06.14 00:47:42 | 000,000,926 | ---- | M] () -- \old_htdocs\lotus\core\lib\ModuleLoader.php
[2010.06.12 19:38:20 | 000,001,779 | ---- | M] () -- \old_htdocs\lotus\core\model\ModuleLoaderModel.php
[2010.06.12 19:38:54 | 000,000,219 | ---- | M] () -- \old_htdocs\lotus\core\view\ModuleLoaderView.php
[2011.02.23 15:12:14 | 000,000,913 | ---- | M] () -- \old_htdocs\lotus\modules\lrte\code\uploader.php
[2011.04.28 00:04:46 | 000,001,511 | ---- | M] () -- \old_htdocs\mince\system\engine\loader.php
[2011.09.10 22:42:54 | 000,001,647 | ---- | M] () -- \old_htdocs\opencart\system\engine\loader.php
[2012.03.19 11:40:17 | 000,003,208 | ---- | M] () -- \old_htdocs\portfolio\backup\backup_2012\backup\graphics\loader.big.black.gif
[2012.03.19 11:40:17 | 000,003,208 | ---- | M] () -- \old_htdocs\portfolio\backup\backup_2012\backup\graphics\loader.big.white.gif
[2012.03.19 11:40:17 | 000,000,668 | ---- | M] () -- \old_htdocs\portfolio\backup\backup_2012\backup\graphics\loader.black.gif
[2012.03.19 11:40:17 | 000,000,673 | ---- | M] () -- \old_htdocs\portfolio\backup\backup_2012\backup\graphics\loader.white.gif
[2010.01.13 22:31:56 | 000,003,208 | ---- | M] () -- \old_htdocs\portfolio\modules\bakery\images\loader.gif
[2011.08.15 23:16:08 | 000,008,238 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\ContentFlow\img\loader.gif
[2011.08.15 23:16:08 | 000,008,238 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\ContentFlow\img\loader_white.gif
[2011.08.15 22:48:02 | 000,010,819 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\galleryview\loader.gif
[2011.08.15 22:48:02 | 000,000,668 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\highslide\graphics\loader.gif
[2011.08.15 22:48:02 | 000,000,673 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\highslide\graphics\loader.white.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo1\ajax-loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo2\ajax-loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo3\ajax-loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo4\ajax-loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo5\ajax-loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\dark_rounded\loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\dark_square\loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\light_rounded\loader.gif
[2011.08.15 22:48:02 | 000,002,545 | ---- | M] () -- \old_htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\light_square\loader.gif
[2012.01.03 20:04:57 | 000,003,208 | ---- | M] () -- \old_htdocs\www\backup\graphics\loader.big.black.gif
[2012.01.03 20:04:57 | 000,003,208 | ---- | M] () -- \old_htdocs\www\backup\graphics\loader.big.white.gif
[2012.01.03 20:04:57 | 000,000,668 | ---- | M] () -- \old_htdocs\www\backup\graphics\loader.black.gif
[2012.01.03 20:04:57 | 000,000,673 | ---- | M] () -- \old_htdocs\www\backup\graphics\loader.white.gif
[2014.01.20 14:16:52 | 000,007,281 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit.resources\inspector\HeapSnapshotLoader.js
[2012.09.25 04:39:16 | 000,112,128 | ---- | M] () -- \Program Files (x86)\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2006.10.10 11:31:42 | 000,132,648 | ---- | M] () -- \Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Programs\PCULoader.exe
[2011.02.26 19:33:06 | 000,008,192 | ---- | M] () -- \Program Files (x86)\Deluge\_win32sysloader.pyd
[2011.08.01 06:32:52 | 000,006,602 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.3-py2.6.egg\deluge\httpdownloader.pyc
[2011.08.01 06:32:50 | 000,001,084 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.3-py2.6.egg\deluge\ui\web\js\ext-extensions\JSLoader.js
[2011.08.01 06:32:52 | 000,000,482 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.3-py2.6.egg\deluge\ui\web\js\ext-extensions\tree\TreeGridLoader.js
[2012.04.10 03:48:06 | 000,006,602 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.5-py2.6.egg\deluge\httpdownloader.pyc
[2012.04.10 03:48:04 | 000,001,084 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.5-py2.6.egg\deluge\ui\web\js\ext-extensions\JSLoader.js
[2012.04.10 03:48:04 | 000,000,484 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.5-py2.6.egg\deluge\ui\web\js\ext-extensions\tree\TreeGridLoader.js
[2013.02.25 19:49:26 | 000,006,602 | ---- | M] () -- \Program Files (x86)\Deluge\deluge-1.3.6-py2.6.egg\deluge\httpdownloader.pyc
[2011.11.21 11:13:34 | 000,033,941 | ---- | M] () -- \Program Files (x86)\GTK2-Runtime\bin\gdk-pixbuf-query-loaders.exe
[2011.11.21 11:15:12 | 000,000,573 | ---- | M] () -- \Program Files (x86)\GTK2-Runtime\lib\gdk-pixbuf-2.0\2.10.0\loaders.cache
[2011.07.18 23:33:32 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Notepad++\user.manual\sites\all\modules\fancy_login\images\ajax-loader.gif
[2014.05.30 01:10:11 | 001,170,208 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\ExtensionLoader.dll
[2013.12.20 01:37:56 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.12.20 01:37:56 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013.12.20 01:37:44 | 000,073,536 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.12.20 01:37:44 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2013.09.17 05:54:36 | 000,029,696 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\javaloader.uno.dll
[2013.09.17 05:57:36 | 000,005,813 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.py
[2013.09.17 05:54:38 | 000,020,992 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.uno.dll
[2013.09.20 14:57:06 | 000,000,171 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.uno.ini
[2013.09.20 14:39:02 | 000,003,868 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\classes\unoloader.jar
[2013.09.16 23:10:56 | 000,013,420 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\python-core-2.7.5\lib\unittest\loader.py
[2012.01.05 10:18:14 | 000,321,344 | ---- | M] () -- \Program Files (x86)\SourceTec\Sothink Web Video Downloader\web-video-downloader.xpi
[2013.10.23 22:07:40 | 000,007,825 | ---- | M] () -- \Program Files (x86)\Steam\remoteui\static\libs\images\ajax-loader.gif
[2014.06.22 17:48:58 | 000,323,584 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Assassin's Creed 3\ubiorbitapi_r2_loader.dll
[2014.06.22 17:40:00 | 000,292,352 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Assassin's Creed 3\uplay_r1_loader.dll
[2011.12.28 04:24:48 | 000,002,521 | ---- | M] () -- \Program Files (x86)\StepMania 5\Themes\default\BGAnimations\ScreenWithMenuElements background\_particleLoader.lua
[2012.10.18 11:23:46 | 000,328,784 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed III\ubiorbitapi_r2_loader.dll
[2012.10.18 11:23:54 | 000,297,552 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed III\uplay_r1_loader.dll
[2013.03.03 10:18:07 | 000,330,040 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2013.03.03 10:18:07 | 000,294,400 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2008.05.27 11:43:24 | 000,001,666 | ---- | M] () -- \Program Files (x86)\Zaklínač - Rozšířená edice\System\Scripts\CSkinLoader.luc
[2011.04.08 22:19:24 | 000,901,120 | ---- | M] () -- \Program Files (x86)\Zazzle\Uploader\Uploader.exe
[2013.12.06 08:46:12 | 000,046,080 | ---- | M] () -- \Program Files\Avidemux 2.6 - 64bits\libADM_coreImageLoader6.dll
[2014.03.28 11:16:02 | 000,056,320 | R--- | M] () -- \Program Files\Calibre2\DLLs\PyISAPI_loader.dll
[2014.03.28 11:16:02 | 000,008,704 | R--- | M] () -- \Program Files\Calibre2\DLLs\pythoncomloader27.dll
[2011.03.08 09:43:28 | 000,013,734 | ---- | M] () -- \Program Files\GIMP 2\Python\Lib\unittest\loader.py
[2013.09.16 14:47:08 | 000,004,660 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders.cache
[2013.09.12 17:00:38 | 000,088,655 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2013.09.12 17:00:38 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll.a
[2013.09.12 17:00:38 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.la
[2013.09.12 17:00:48 | 000,107,788 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-bmp.dll
[2013.09.12 17:00:48 | 000,002,144 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-bmp.dll.a
[2013.09.12 17:00:48 | 000,001,451 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-bmp.la
[2013.09.12 17:00:48 | 000,107,164 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-emf.dll
[2013.09.12 17:00:46 | 000,002,144 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-emf.dll.a
[2013.09.12 17:00:48 | 000,001,451 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-emf.la
[2013.09.12 17:00:48 | 000,107,788 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-gif.dll
[2013.09.12 17:00:48 | 000,002,144 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-gif.dll.a
[2013.09.12 17:00:48 | 000,001,451 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-gif.la
[2013.09.12 17:00:46 | 000,107,164 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-ico.dll
[2013.09.12 17:00:44 | 000,002,144 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-ico.dll.a
[2013.09.12 17:00:46 | 000,001,451 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-ico.la
[2013.09.12 17:00:50 | 000,109,080 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-jpeg.dll
[2013.09.12 17:00:50 | 000,002,148 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-jpeg.dll.a
[2013.09.12 17:00:50 | 000,001,455 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-jpeg.la
[2013.09.12 17:00:50 | 000,107,790 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-tiff.dll
[2013.09.12 17:00:50 | 000,002,148 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-tiff.dll.a
[2013.09.12 17:00:50 | 000,001,455 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-tiff.la
[2013.09.12 17:00:46 | 000,107,164 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-wmf.dll
[2013.09.12 17:00:46 | 000,002,144 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-wmf.dll.a
[2013.09.12 17:00:46 | 000,001,451 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-gdip-wmf.la
[2013.09.12 17:00:42 | 000,077,786 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2013.09.12 17:00:42 | 000,002,112 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.dll.a
[2013.09.12 17:00:42 | 000,001,435 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-icns.la
[2013.09.12 17:00:44 | 000,078,426 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2013.09.12 17:00:42 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pcx.dll.a
[2013.09.12 17:00:44 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pcx.la
[2013.09.12 17:00:36 | 000,093,458 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2013.09.12 17:00:36 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-png.dll.a
[2013.09.12 17:00:36 | 000,001,452 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-png.la
[2013.09.12 17:00:38 | 000,081,123 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2013.09.12 17:00:38 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.dll.a
[2013.09.12 17:00:38 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-pnm.la
[2013.09.12 17:00:44 | 000,078,609 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll
[2013.09.12 17:00:44 | 000,002,112 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.dll.a
[2013.09.12 17:00:44 | 000,001,435 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-qtif.la
[2013.09.12 17:00:40 | 000,075,122 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2013.09.12 17:00:38 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ras.dll.a
[2013.09.12 17:00:40 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ras.la
[2013.09.16 14:47:08 | 000,003,908 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-svg.a
[2013.09.16 14:47:08 | 000,073,945 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-svg.dll
[2013.09.16 14:47:06 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-svg.dll.a
[2013.09.16 14:47:08 | 000,002,110 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-svg.la
[2013.09.12 17:00:42 | 000,081,429 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2013.09.12 17:00:42 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.dll.a
[2013.09.12 17:00:42 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-tga.la
[2013.09.12 17:00:36 | 000,074,949 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2013.09.12 17:00:36 | 000,002,112 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll.a
[2013.09.12 17:00:36 | 000,001,435 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-wbmp.la
[2013.09.12 17:00:42 | 000,079,629 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2013.09.12 17:00:40 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.dll.a
[2013.09.12 17:00:42 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xbm.la
[2013.09.12 17:00:40 | 000,097,132 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2013.09.12 17:00:40 | 000,002,098 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.dll.a
[2013.09.12 17:00:40 | 000,001,431 | ---- | M] () -- \Program Files\Inkscape-0.48\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-xpm.la
[2011.03.08 15:46:56 | 000,013,734 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\loader.py
[2012.04.15 23:42:12 | 000,011,352 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\loader.pyc
[2012.04.15 23:42:32 | 000,011,212 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\loader.pyo
[2011.03.08 15:46:56 | 000,050,487 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\test\test_loader.py
[2012.04.15 23:42:12 | 000,049,256 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\test\test_loader.pyc
[2012.04.15 23:42:32 | 000,049,256 | ---- | M] () -- \Program Files\Inkscape-0.48\python\Lib\unittest\test\test_loader.pyo
[2013.12.01 14:09:05 | 000,061,528 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2013.03.12 15:05:03 | 000,000,104 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Users\Dana\AppData\Roaming\.minecraft\config\ModLoader.cfg
[2013.03.05 14:03:38 | 000,000,630 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Users\Dana\AppData\Roaming\Microsoft\Windows\Recent\FanFictionDownLoaderPlugin-1.7.12.zip.lnk
[2011.10.20 18:13:25 | 000,008,216 | ---- | M] () -- \texlive\2011\texmf-dist\source\generic\hyph-utf8\generate-pattern-loaders.rb
[2011.10.20 18:18:32 | 000,012,927 | ---- | M] () -- \texlive\2011\texmf-dist\source\luatex\luatexbase\luatexbase-loader.dtx
[2011.10.20 18:22:23 | 000,003,848 | ---- | M] () -- \texlive\2011\texmf-dist\tex\generic\oberdiek\luatex-loader.sty
[2011.10.20 18:24:11 | 000,001,603 | ---- | M] () -- \texlive\2011\texmf-dist\tex\generic\pgfplots\oldpgfcompatib\pgfplotsoldpgfsupp_loader.code.tex
[2011.10.20 18:18:31 | 000,002,580 | ---- | M] () -- \texlive\2011\texmf-dist\tex\luatex\luatexbase\luatexbase-loader.sty
[2011.10.20 18:18:31 | 000,002,075 | ---- | M] () -- \texlive\2011\texmf-dist\tex\luatex\luatexbase\luatexbase.loader.lua
[2011.10.20 18:32:57 | 000,015,003 | ---- | M] () -- \texlive\2011\tlpkg\tlperl\lib\AutoLoader.pm
[2011.10.20 18:32:56 | 000,025,035 | ---- | M] () -- \texlive\2011\tlpkg\tlperl\lib\DynaLoader.pm
[2011.10.20 18:32:56 | 000,017,341 | ---- | M] () -- \texlive\2011\tlpkg\tlperl\lib\SelfLoader.pm
[2011.10.20 18:32:54 | 000,010,524 | ---- | M] () -- \texlive\2011\tlpkg\tlperl\lib\XSLoader.pm
[2011.10.20 18:32:58 | 000,001,329 | ---- | M] () -- \texlive\2011\tlpkg\tlperl\lib\Locale\Maketext\GutsLoader.pm
[2014.06.09 17:06:28 | 000,004,541 | ---- | M] () -- \Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\36.0.1985.63_0\wcs_loader.js
[2014.06.26 09:46:50 | 000,009,418 | ---- | M] () -- \Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.8_0\img\gifloader.gif
[2014.06.09 16:39:29 | 000,001,980 | ---- | M] () -- \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D33D1K3N\AdLoader[1].htm
[316 \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D33D1K3N\*.tmp files -> \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D33D1K3N\*.tmp -> ]
[2014.06.09 16:39:29 | 000,017,912 | ---- | M] () -- \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSBS5B29\AdLoader-3b8e790904fffcf74f96367cd382e261.min[1].js
[2014.07.04 23:53:12 | 000,001,980 | ---- | M] () -- \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSBS5B29\AdLoader[1].htm
[258 \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSBS5B29\*.tmp files -> \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSBS5B29\*.tmp -> ]
[2014.06.23 14:25:39 | 000,007,279 | ---- | M] () -- \Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\A2SWFBDM\loader[1].js
[2014.02.18 18:46:42 | 000,072,638 | ---- | M] () -- \Users\Dana\AppData\Local\Skype\Apps\login\images\loader.gif
[2014.02.18 18:46:42 | 000,003,032 | ---- | M] () -- \Users\Dana\AppData\Local\Skype\Apps\login\images\loader.png
[2014.02.18 18:46:42 | 000,006,012 | ---- | M] () -- \Users\Dana\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif
[2014.02.18 18:46:42 | 000,021,956 | ---- | M] () -- \Users\Dana\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif
[2014.02.18 18:46:42 | 000,009,772 | ---- | M] () -- \Users\Dana\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png
[2014.01.29 23:12:37 | 557,795,011 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log
[2014.01.29 23:09:47 | 000,000,000 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log.lck
[2014.01.29 01:14:35 | 000,454,352 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ForgeModLoader-client-1.log
[2014.01.28 22:49:14 | 000,687,079 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ForgeModLoader-client-2.log
[2013.11.03 13:32:06 | 000,005,429 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ModLoader.txt
[2013.07.18 16:30:18 | 000,004,156 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\ModLoader.txt.1
[2013.11.03 13:32:04 | 000,000,123 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\config\ModLoader.cfg
[2013.02.13 16:05:37 | 000,001,454 | ---- | M] () -- \Users\Dana\AppData\Roaming\backup.minecraft\ModLoader.txt
[2014.04.10 22:00:36 | 000,768,098 | ---- | M] () -- \Users\Dana\AppData\Roaming\calibre\plugins\FanFictionDownLoader.zip
[2014.07.23 20:25:24 | 000,076,615 | ---- | M] () -- \Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi
[2014.05.12 23:22:29 | 000,001,079 | ---- | M] () -- \Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}\chrome\content\skin\ajax-loader.gif
[2014.05.12 23:22:30 | 000,000,432 | ---- | M] () -- \Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}\chrome\content\skin\loader.gif
[2012.03.31 01:32:56 | 000,009,289 | ---- | M] () -- \Users\Dana\Documents\prace\!layouts\themeforest-165827-plus-html-theme\Code\images\camera-loader.gif
[2013.03.19 15:16:41 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\!moje\jewelry\web\bakery\images\ajax-loader.gif
[2013.03.19 15:16:40 | 000,003,208 | ---- | M] () -- \Users\Dana\Documents\prace\!moje\jewelry\web\bakery\images\loader.gif
[2013.03.19 15:16:16 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\!moje\jewelry\web\bakery_backup\images\ajax-loader.gif
[2013.03.19 15:16:16 | 000,003,208 | ---- | M] () -- \Users\Dana\Documents\prace\!moje\jewelry\web\bakery_backup\images\loader.gif
[2013.03.04 23:32:22 | 000,000,723 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\ajax-pagination-basic\ajax-loader.gif
[2013.05.09 03:21:46 | 000,057,052 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\yoko\plugins\lam_image_uploader.1.plugin
[2010.10.01 11:02:18 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup\system\engine\loader.php
[2013.01.30 13:23:55 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup012013\system\engine\loader.php
[2013.01.30 13:24:01 | 000,001,997 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup012013\vqmod\vqcache\vq2-system_engine_loader.php
[2013.06.13 17:07:36 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup0613\www\system\engine\loader.php
[2013.06.13 17:07:45 | 000,001,997 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup0613\www\vqmod\vqcache\vq2-system_engine_loader.php
[2012.10.05 11:43:05 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup102012\system\engine\loader.php
[2010.10.26 23:37:23 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup2610\system\engine\loader.php
[2010.10.27 14:06:04 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\backup27102010\www\system\engine\loader.php
[2010.05.18 23:31:30 | 000,001,731 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\upload\system\engine\loader.php
[2010.10.31 15:17:06 | 000,001,801 | ---- | M] () -- \Users\Dana\Documents\prace\kabelky\www\system\engine\loader.php
[2014.06.26 22:06:02 | 000,001,905 | ---- | M] () -- \Users\Dana\Documents\prace\mince\system\engine\loader.php
[2014.06.26 22:05:46 | 000,002,022 | ---- | M] () -- \Users\Dana\Documents\prace\mince\system\PHPExcel\Classes\PHPExcel\Autoloader.php
[2014.01.31 13:07:58 | 000,001,793 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\administrator\components\com_jce\includes\loader.php
[2014.01.31 13:08:21 | 000,002,594 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\administrator\components\com_phocagallery\libraries\loader.php
[2014.01.31 13:09:11 | 000,039,885 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\administrator\components\com_smartformer\plugins\edit_area\edit_area_loader.js
[2014.01.31 13:11:10 | 000,004,541 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_foxcontact\helpers\fajaxuploader.php
[2014.01.31 13:11:09 | 000,004,504 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_foxcontact\helpers\fuploader.php
[2014.01.31 13:11:10 | 000,018,552 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_foxcontact\js\fileuploader-min.js
[2014.01.31 13:11:10 | 000,041,702 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_foxcontact\js\fileuploader.js
[2014.01.31 13:11:10 | 000,007,751 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_foxcontact\lib\file-uploader.php
[2014.01.31 13:11:37 | 000,000,668 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_phocagallery\assets\js\highslide\graphics\loader.gif
[2014.01.31 13:11:37 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\components\com_phocagallery\assets\js\highslide\graphics\loader.white.gif
[2014.01.31 13:13:29 | 000,009,988 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\libraries\loader.php
[2014.01.31 13:14:23 | 000,000,584 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\media\system\images\mootree_loader.gif
[2014.01.31 13:14:24 | 000,006,491 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\media\system\js\uploader-uncompressed.js
[2014.01.31 13:14:24 | 000,005,024 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\media\system\js\uploader.js
[2014.01.31 13:14:26 | 000,010,222 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\backup\www\media\system\swf\uploader.swf
[2012.06.28 10:50:34 | 000,001,733 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\administrator\components\com_jce\includes\loader.php
[2012.08.03 12:17:22 | 000,002,513 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\administrator\components\com_phocagallery\libraries\loader.php
[2012.07.06 15:45:24 | 000,039,885 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\administrator\components\com_smartformer\plugins\edit_area\edit_area_loader.js
[2012.07.06 15:59:02 | 000,004,412 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_foxcontact\helpers\fajaxuploader.php
[2012.07.06 15:59:02 | 000,004,370 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_foxcontact\helpers\fuploader.php
[2012.07.06 15:59:02 | 000,018,551 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_foxcontact\js\fileuploader-min.js
[2012.07.06 15:59:02 | 000,040,442 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_foxcontact\js\fileuploader.js
[2012.07.06 15:59:02 | 000,007,508 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_foxcontact\lib\file-uploader.php
[2012.08.03 12:17:22 | 000,000,668 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_phocagallery\assets\js\highslide\graphics\loader.gif
[2012.08.03 12:17:22 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\components\com_phocagallery\assets\js\highslide\graphics\loader.white.gif
[2012.06.28 10:49:58 | 000,009,621 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\libraries\loader.php
[2012.06.06 17:47:56 | 000,000,584 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\media\system\images\mootree_loader.gif
[2012.06.28 10:49:58 | 000,006,278 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\media\system\js\uploader-uncompressed.js
[2012.06.28 10:49:58 | 000,005,024 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\media\system\js\uploader.js
[2012.06.06 17:48:36 | 000,010,222 | ---- | M] () -- \Users\Dana\Documents\prace\portabohemia\cseh-portabohemia\media\system\swf\uploader.swf
[2013.02.11 11:58:02 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\prozdravi\bakery\images\ajax-loader.gif
[2013.02.11 11:58:02 | 000,003,208 | ---- | M] () -- \Users\Dana\Documents\prace\prozdravi\bakery\images\loader.gif
[2013.05.01 12:04:23 | 000,001,021 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Autoloader.php
[2013.05.01 12:04:23 | 000,000,745 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\ExistsLoaderInterface.php
[2013.05.01 12:04:23 | 000,001,411 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\LoaderInterface.php
[2013.05.01 12:04:24 | 000,001,002 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Error\Loader.php
[2013.05.01 12:04:24 | 000,001,432 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Extension\StringLoader.php
[2013.05.01 12:04:17 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\mpform\ajax\jquery.cluetip\cluetip_images\ajax-loader.gif
[2013.05.01 12:04:18 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup\modules\mpform\images\ajax-loader.gif
[2014.07.20 09:35:13 | 000,001,021 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Autoloader.php
[2014.07.20 09:35:13 | 000,000,745 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\ExistsLoaderInterface.php
[2014.07.20 09:35:13 | 000,001,411 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\LoaderInterface.php
[2014.07.20 09:35:13 | 000,001,002 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Error\Loader.php
[2014.07.20 09:35:13 | 000,001,432 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Extension\StringLoader.php
[2014.07.20 09:35:09 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\mpform\ajax\jquery.cluetip\cluetip_images\ajax-loader.gif
[2014.07.20 09:35:10 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\modules\mpform\images\ajax-loader.gif
[2014.07.20 09:36:37 | 000,009,427 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\testy\img\ajax-loader.gif
[2014.07.20 09:40:43 | 000,000,366 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\breezingforms\themes\images\ajax-loader.png
[2014.07.20 09:39:08 | 000,000,366 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\breezing-forms\platform\components\com_breezingforms\themes\quickmode\images\ajax-loader.png
[2014.07.20 09:39:09 | 000,008,584 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\breezing-forms\platform\libraries\loader.php
[2014.07.20 09:39:10 | 000,001,848 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\breezing-forms\platform\libraries\cms\cmsloader.php
[2014.07.20 09:37:54 | 000,001,516 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\calculated-fields-form\js\fbuilder-loader-admin.php
[2014.07.20 09:37:54 | 000,002,565 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\calculated-fields-form\js\fbuilder-loader-public.php
[2014.07.20 09:37:45 | 000,000,847 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\contact-form-7\images\ajax-loader.gif
[2014.07.20 09:37:08 | 000,002,857 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\sendpress\classes\class-file-loader.php
[2014.07.20 09:37:08 | 000,009,138 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\sendpress\classes\class-sendpress-ajax-loader.php
[2014.07.20 09:37:07 | 000,004,723 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\sendpress\classes\class-sendpress-shortcode-loader.php
[2014.07.20 09:37:07 | 000,001,133 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\sendpress\classes\selective-loader.php
[2014.07.20 09:37:23 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\sendpress\img\ajax-loader.gif
[2014.07.20 09:37:33 | 000,007,173 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\updraftplus\oc\composer\ClassLoader.php
[2014.07.20 09:38:43 | 000,001,310 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\w3-total-cache\lib\W3\Environment\WpLoader.php
[2014.07.20 09:36:53 | 000,009,594 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-simple-galleries\admin\options-medialibrary-uploader.php
[2014.07.20 09:36:53 | 000,006,743 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-simple-galleries\admin\js\of-medialibrary-uploader.js
[2014.07.20 09:36:51 | 000,002,545 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_rounded\loader.gif
[2014.07.20 09:36:51 | 000,002,545 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_square\loader.gif
[2014.07.20 09:36:51 | 000,006,331 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\default\loader.gif
[2014.07.20 09:36:51 | 000,002,545 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\facebook\loader.gif
[2014.07.20 09:36:52 | 000,002,545 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_rounded\loader.gif
[2014.07.20 09:36:52 | 000,002,545 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_square\loader.gif
[2014.07.20 09:40:44 | 000,048,979 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\script-loader.php
[2014.07.20 09:40:44 | 000,002,823 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\template-loader.php
[2014.07.20 09:40:47 | 000,003,878 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\images\uploader-icons-2x.png
[2014.07.20 09:40:47 | 000,001,556 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\images\uploader-icons.png
[2014.07.20 09:40:51 | 000,004,446 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\js\customize-loader.js
[2014.07.20 09:40:51 | 000,002,539 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\js\customize-loader.min.js
[2014.07.20 09:40:56 | 000,002,608 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\js\tinymce\skins\lightgray\img\loader.gif
[2013.06.10 17:41:38 | 000,001,021 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Autoloader.php
[2013.06.10 17:41:38 | 000,000,745 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\ExistsLoaderInterface.php
[2013.06.10 17:41:38 | 000,001,411 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\LoaderInterface.php
[2013.06.10 17:41:39 | 000,001,002 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Error\Loader.php
[2013.06.10 17:41:39 | 000,001,432 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\cwsoft-addon-file-editor\thirdparty\Twig\Twig\Extension\StringLoader.php
[2013.06.10 17:41:31 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\mpform\ajax\jquery.cluetip\cluetip_images\ajax-loader.gif
[2013.06.10 17:41:33 | 000,001,456 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup-prewp\modules\mpform\images\ajax-loader.gif
[2013.12.05 16:47:24 | 000,009,289 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\united\ecslideshow\camera-loader.gif
[2013.08.23 15:16:46 | 000,009,427 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\united\testy\img\ajax-loader.gif
[2014.07.09 18:39:24 | 000,036,528 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wordpress\wp-includes\script-loader.php
[2014.07.09 18:39:26 | 000,001,940 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wordpress\wp-includes\template-loader.php
[2014.07.09 18:38:13 | 000,000,673 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-content\plugins\nextgen-gallery\images\ajax-loader.gif
[2014.07.09 18:38:13 | 000,006,820 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-content\plugins\nextgen-gallery\images\loader.gif
[2014.07.09 18:38:32 | 000,007,173 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-content\plugins\updraftplus\oc\composer\ClassLoader.php
[2014.07.09 18:36:53 | 000,045,295 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\script-loader.php
[2014.07.09 18:36:56 | 000,002,823 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\template-loader.php
[2014.07.09 18:37:19 | 000,003,915 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\images\uploader-icons-2x.png
[2014.07.09 18:37:19 | 000,001,593 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\images\uploader-icons.png
[2014.07.09 18:37:02 | 000,004,408 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\js\customize-loader.js
[2014.07.09 18:37:01 | 000,002,539 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\js\customize-loader.min.js
[2010.10.11 14:09:42 | 000,013,797 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\128x128\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,000,525 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\16x16\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,001,070 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\24x24\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,026,958 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\256x256\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,001,675 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\32x32\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,003,152 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\48x48\ContainerLoader_Grey.png
[2010.10.11 14:09:42 | 000,004,976 | ---- | M] () -- \Users\Dana\Pictures\icons\PNG\GroundSupportEquipment\64x64\ContainerLoader_Grey.png
[2013.12.28 12:36:06 | 000,185,174 | ---- | M] () -- \Users\Public\Documents\ModLoader.zip
[2011.10.30 20:17:05 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2012.02.03 04:32:08 | 000,112,128 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\A8640317F35F8964C8903A93AEB3506E\3.0.655\ta_productapiloader..D321D6CC_DBBE_4AC3_8DBD_DFF82BB39BDC
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2014.04.14 15:30:34 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2014.04.14 15:30:34 | 000,012,532 | ---- | M] () -- \Windows\SysWOW64\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.18 17:22:27 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_66ff46fd953e6c5c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:41:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 20:46:36 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_6787e564ae5ceff6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 20:38:32 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 20:09:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 07:11:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_692597a0abb965cc\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 13:03:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_69637bfcab8b6996\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.09.28 22:04:31 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011.09.28 22:04:31 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2011.09.28 22:04:31 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2011.09.28 22:04:31 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2011.09.28 22:04:31 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2009.07.14 07:37:37 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009.07.14 07:37:37 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2009.07.14 07:37:37 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2009.07.14 07:37:37 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2009.07.14 07:37:37 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2011.09.29 11:14:27 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.09.29 11:14:27 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011.09.29 11:14:27 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011.09.29 11:14:27 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011.09.29 11:14:27 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011.09.28 22:01:38 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 04:44:20 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.18 13:09:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_0ae0ab79dce0fb26\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 19:42:56 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_0b6949e0f5ff7ec0\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 19:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 19:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 06:59:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_0d06fc1cf35bf496\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll

[2011.10.06 15:12:10 | 000,035,734 | ---- | M] () -- \xampp\htdocs\concrete\concrete\flash\uploader\uploader.swf
[2011.10.06 15:14:00 | 000,019,776 | ---- | M] () -- \xampp\htdocs\concrete\concrete\libraries\loader.php
[2011.10.06 15:12:10 | 000,011,397 | ---- | M] () -- \xampp\htdocs\concrete\concrete\libraries\3rdparty\Zend\Loader.php
[2011.10.06 15:12:10 | 000,016,892 | ---- | M] () -- \xampp\htdocs\concrete\concrete\libraries\3rdparty\Zend\Loader\Autoloader.php
[2011.10.06 15:12:10 | 000,014,749 | ---- | M] () -- \xampp\htdocs\concrete\concrete\libraries\3rdparty\Zend\Loader\PluginLoader.php
[2011.10.06 15:12:12 | 000,010,495 | ---- | M] () -- \xampp\htdocs\concrete\concrete\libraries\3rdparty\Zend\Search\Lucene\Index\DictionaryLoader.php
[2011.09.10 23:42:54 | 000,001,647 | ---- | M] () -- \xampp\htdocs\ictshop\system\engine\loader.php
[2013.01.02 13:18:46 | 000,001,791 | ---- | M] () -- \xampp\htdocs\ictshop\vqmod\vqcache\vq2-system_engine_loader.php
[2012.08.16 15:58:00 | 000,001,905 | ---- | M] () -- \xampp\htdocs\jewelry\system\engine\loader.php
[2012.04.27 19:46:51 | 000,002,513 | ---- | M] () -- \xampp\htdocs\joomla\administrator\components\com_phocagallery\libraries\loader.php
[2012.04.27 19:46:49 | 000,000,668 | ---- | M] () -- \xampp\htdocs\joomla\components\com_phocagallery\assets\js\highslide\graphics\loader.gif
[2012.04.27 19:46:49 | 000,000,673 | ---- | M] () -- \xampp\htdocs\joomla\components\com_phocagallery\assets\js\highslide\graphics\loader.white.gif
[2012.04.27 15:49:23 | 000,007,773 | ---- | M] () -- \xampp\htdocs\joomla\libraries\loader.php
[2012.03.14 15:49:44 | 000,001,786 | ---- | M] () -- \xampp\htdocs\joomla\libraries\cms\cmsloader.php
[2012.03.14 15:49:44 | 000,000,584 | ---- | M] () -- \xampp\htdocs\joomla\media\system\images\mootree_loader.gif
[2012.04.27 15:49:24 | 000,006,278 | ---- | M] () -- \xampp\htdocs\joomla\media\system\js\uploader-uncompressed.js
[2012.04.27 15:49:24 | 000,005,024 | ---- | M] () -- \xampp\htdocs\joomla\media\system\js\uploader.js
[2012.03.14 15:49:44 | 000,010,222 | ---- | M] () -- \xampp\htdocs\joomla\media\system\swf\uploader.swf
[2011.04.28 00:04:46 | 000,001,511 | ---- | M] () -- \xampp\htdocs\kabelky\system\engine\loader.php
[2013.02.05 12:27:17 | 000,001,923 | ---- | M] () -- \xampp\htdocs\kabelky\vqmod\vqcache\vq2-system_engine_loader.php
[2010.06.12 20:09:00 | 000,002,213 | ---- | M] () -- \xampp\htdocs\lotus\core\controller\ModuleLoaderController.php
[2010.06.14 00:47:42 | 000,000,926 | ---- | M] () -- \xampp\htdocs\lotus\core\lib\ModuleLoader.php
[2010.06.12 19:38:20 | 000,001,779 | ---- | M] () -- \xampp\htdocs\lotus\core\model\ModuleLoaderModel.php
[2010.06.12 19:38:54 | 000,000,219 | ---- | M] () -- \xampp\htdocs\lotus\core\view\ModuleLoaderView.php
[2011.02.23 15:12:14 | 000,000,913 | ---- | M] () -- \xampp\htdocs\lotus\modules\lrte\code\uploader.php
[2011.04.28 00:04:46 | 000,001,511 | ---- | M] () -- \xampp\htdocs\mince\system\engine\loader.php
[2013.01.20 05:40:30 | 000,001,583 | ---- | M] () -- \xampp\htdocs\ocnew\system\engine\loader.php
[2012.05.09 01:33:12 | 000,001,905 | ---- | M] () -- \xampp\htdocs\opencart\system\engine\loader.php
[2013.01.08 13:07:35 | 000,002,097 | ---- | M] () -- \xampp\htdocs\opencart\vqmod\vqcache\vq2-system_engine_loader.php
[2012.03.19 11:40:17 | 000,003,208 | ---- | M] () -- \xampp\htdocs\portfolio\backup\backup_2012\backup\graphics\loader.big.black.gif
[2012.03.19 11:40:17 | 000,003,208 | ---- | M] () -- \xampp\htdocs\portfolio\backup\backup_2012\backup\graphics\loader.big.white.gif
[2012.03.19 11:40:17 | 000,000,668 | ---- | M] () -- \xampp\htdocs\portfolio\backup\backup_2012\backup\graphics\loader.black.gif
[2012.03.19 11:40:17 | 000,000,673 | ---- | M] () -- \xampp\htdocs\portfolio\backup\backup_2012\backup\graphics\loader.white.gif
[2010.01.13 22:31:56 | 000,003,208 | ---- | M] () -- \xampp\htdocs\portfolio\modules\bakery\images\loader.gif
[2012.06.16 21:50:50 | 000,001,098 | ---- | M] () -- \xampp\htdocs\portfolio\modules\cwsoft-anynews\thirdparty\Twig\Twig\Autoloader.php
[2012.06.16 21:50:50 | 000,001,392 | ---- | M] () -- \xampp\htdocs\portfolio\modules\cwsoft-anynews\thirdparty\Twig\Twig\LoaderInterface.php
[2012.06.16 21:50:50 | 000,000,424 | ---- | M] () -- \xampp\htdocs\portfolio\modules\cwsoft-anynews\thirdparty\Twig\Twig\Error\Loader.php
[2013.11.07 15:09:02 | 000,002,732 | ---- | M] () -- \xampp\htdocs\shop\wp-content\plugins\sendpress\classes\class-file-loader.php
[2013.11.07 15:09:02 | 000,007,690 | ---- | M] () -- \xampp\htdocs\shop\wp-content\plugins\sendpress\classes\class-sendpress-ajax-loader.php
[2013.11.07 15:09:02 | 000,001,099 | ---- | M] () -- \xampp\htdocs\shop\wp-content\plugins\sendpress\classes\selective-loader.php
[2013.11.07 15:09:20 | 000,000,885 | ---- | M] () -- \xampp\htdocs\shop\wp-content\plugins\woocommerce\assets\images\ajax-loader.gif
[2013.11.07 15:09:20 | 000,001,156 | ---- | M] () -- \xampp\htdocs\shop\wp-content\plugins\woocommerce\assets\images\ajax-loader@2x.gif
[2013.08.01 13:47:24 | 000,043,875 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\script-loader.php
[2012.10.31 23:01:14 | 000,002,060 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\template-loader.php
[2012.11.30 02:18:08 | 000,003,915 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\images\uploader-icons-2x.png
[2012.11.30 02:18:08 | 000,001,593 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\images\uploader-icons.png
[2012.11.21 22:31:56 | 000,004,244 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\js\customize-loader.js
[2012.11.21 22:31:56 | 000,002,642 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\js\customize-loader.min.js
[2014.07.13 09:55:13 | 000,000,366 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\breezing-forms\platform\components\com_breezingforms\themes\quickmode\images\ajax-loader.png
[2014.07.13 09:55:17 | 000,008,260 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\breezing-forms\platform\libraries\loader.php
[2014.07.13 09:55:14 | 000,001,786 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\breezing-forms\platform\libraries\cms\cmsloader.php
[2014.02.13 11:22:46 | 000,001,516 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\calculated-fields-form\js\fbuilder-loader-admin.php
[2014.02.13 11:22:46 | 000,002,565 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\calculated-fields-form\js\fbuilder-loader-public.php
[2014.04.29 12:32:02 | 000,000,847 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\contact-form-7\images\ajax-loader.gif
[2014.04.29 12:32:32 | 000,002,732 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\sendpress\classes\class-file-loader.php
[2014.04.29 12:32:32 | 000,008,552 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\sendpress\classes\class-sendpress-ajax-loader.php
[2014.04.29 12:32:32 | 000,004,548 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\sendpress\classes\class-sendpress-shortcode-loader.php
[2014.04.29 12:32:32 | 000,001,099 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\sendpress\classes\selective-loader.php
[2014.04.29 12:32:38 | 000,000,673 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\sendpress\img\ajax-loader.gif
[2014.07.13 09:39:44 | 000,006,927 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\updraftplus\oc\composer\ClassLoader.php
[2014.04.10 16:08:38 | 000,001,268 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\w3-total-cache\lib\W3\Environment\WpLoader.php
[2013.07.09 09:56:50 | 000,009,304 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-simple-galleries\admin\options-medialibrary-uploader.php
[2013.07.09 09:56:50 | 000,006,581 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-simple-galleries\admin\js\of-medialibrary-uploader.js
[2014.04.29 12:33:28 | 000,002,545 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_rounded\loader.gif
[2014.04.29 12:33:28 | 000,002,545 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_square\loader.gif
[2014.04.29 12:33:28 | 000,006,331 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\default\loader.gif
[2014.04.29 12:33:28 | 000,002,545 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\facebook\loader.gif
[2014.04.29 12:33:28 | 000,002,545 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_rounded\loader.gif
[2014.04.29 12:33:28 | 000,002,545 | ---- | M] () -- \xampp\htdocs\studynet\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_square\loader.gif
[2014.05.01 04:27:16 | 000,047,934 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\script-loader.php
[2013.10.30 14:39:10 | 000,002,747 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\template-loader.php
[2014.02.13 08:03:14 | 000,003,878 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\images\uploader-icons-2x.png
[2014.02.13 08:03:14 | 000,001,556 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\images\uploader-icons.png
[2013.11.15 04:31:10 | 000,004,281 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\js\customize-loader.js
[2013.11.13 21:45:12 | 000,002,539 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\js\customize-loader.min.js
[2013.12.28 23:53:16 | 000,002,608 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\js\tinymce\skins\lightgray\img\loader.gif
[2014.07.10 15:47:05 | 000,047,934 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\script-loader.php
[2013.10.30 14:39:10 | 000,002,747 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\template-loader.php
[2014.07.10 15:47:00 | 000,003,878 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\images\uploader-icons-2x.png
[2014.07.10 15:47:00 | 000,001,556 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\images\uploader-icons.png
[2013.11.15 04:31:10 | 000,004,281 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\js\customize-loader.js
[2013.11.13 21:45:12 | 000,002,539 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\js\customize-loader.min.js
[2014.07.10 15:47:03 | 000,002,608 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\js\tinymce\skins\lightgray\img\loader.gif
[2013.08.23 16:20:00 | 000,009,427 | ---- | M] () -- \xampp\htdocs\testy\testy\img\ajax-loader.gif
[2013.02.01 14:55:02 | 000,001,456 | ---- | M] () -- \xampp\htdocs\wb\modules\bakery\images\ajax-loader.gif
[2013.02.01 14:55:02 | 000,003,208 | ---- | M] () -- \xampp\htdocs\wb\modules\bakery\images\loader.gif
[2012.06.16 21:50:50 | 000,001,098 | ---- | M] () -- \xampp\htdocs\wb\modules\cwsoft-anynews\thirdparty\Twig\Twig\Autoloader.php
[2012.06.16 21:50:50 | 000,001,392 | ---- | M] () -- \xampp\htdocs\wb\modules\cwsoft-anynews\thirdparty\Twig\Twig\LoaderInterface.php
[2012.06.16 21:50:50 | 000,000,424 | ---- | M] () -- \xampp\htdocs\wb\modules\cwsoft-anynews\thirdparty\Twig\Twig\Error\Loader.php
[2011.09.26 15:50:32 | 000,010,819 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\galleryview\loader.gif
[2011.09.26 15:50:32 | 000,000,668 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\highslide\graphics\loader.gif
[2011.09.26 15:50:32 | 000,000,673 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\highslide\graphics\loader.white.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo1\ajax-loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo2\ajax-loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo3\ajax-loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo4\ajax-loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\pirobox\css_pirobox\demo5\ajax-loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\dark_rounded\loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\dark_square\loader.gif
[2011.09.26 15:50:32 | 000,006,331 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\default\loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\facebook\loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\light_rounded\loader.gif
[2011.09.26 15:50:32 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wb\modules\foldergallery\scripts\prettyPhoto\images\prettyPhoto\light_square\loader.gif
[2013.09.05 09:44:49 | 000,000,847 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\contact-form-7\images\ajax-loader.gif
[2013.07.15 14:17:59 | 000,001,849 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\jquery-colorbox\images\ajax-loader.gif
[2013.07.15 14:17:59 | 000,004,836 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\jquery-colorbox\includes\donationloader.php
[2013.09.05 09:44:58 | 000,002,732 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\sendpress\classes\class-file-loader.php
[2013.09.05 09:44:58 | 000,007,260 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\sendpress\classes\class-sendpress-ajax-loader.php
[2013.09.05 09:44:59 | 000,001,099 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\sendpress\classes\selective-loader.php
[2013.09.09 12:46:16 | 000,000,885 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\woocommerce\assets\images\ajax-loader.gif
[2013.09.09 12:46:16 | 000,001,156 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\woocommerce\assets\images\ajax-loader@2x.gif
[2013.09.05 09:45:02 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_rounded\loader.gif
[2013.09.05 09:45:02 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\dark_square\loader.gif
[2013.09.05 09:45:02 | 000,006,331 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\default\loader.gif
[2013.09.05 09:45:02 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\facebook\loader.gif
[2013.09.05 09:45:02 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_rounded\loader.gif
[2013.09.05 09:45:02 | 000,002,545 | ---- | M] () -- \xampp\htdocs\wp\wp-content\plugins\wp-video-lightbox\images\prettyPhoto\light_square\loader.gif
[2013.09.05 09:44:09 | 000,043,875 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\script-loader.php
[2013.09.05 09:44:11 | 000,002,060 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\template-loader.php
[2013.09.05 09:44:01 | 000,003,915 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\images\uploader-icons-2x.png
[2013.09.05 09:44:01 | 000,001,593 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\images\uploader-icons.png
[2013.09.05 09:44:01 | 000,004,244 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\js\customize-loader.js
[2013.09.05 09:44:01 | 000,002,642 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\js\customize-loader.min.js
[2014.02.14 15:02:04 | 000,000,366 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\breezingforms\themes\images\ajax-loader.png
[2014.02.14 15:01:18 | 000,000,366 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\breezing-forms\platform\components\com_breezingforms\themes\quickmode\images\ajax-loader.png
[2014.02.14 15:01:26 | 000,008,260 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\breezing-forms\platform\libraries\loader.php
[2014.02.14 15:01:20 | 000,001,786 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\breezing-forms\platform\libraries\cms\cmsloader.php
[2013.10.07 17:31:34 | 000,002,732 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\sendpress\classes\class-file-loader.php
[2013.10.07 17:31:34 | 000,007,665 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\sendpress\classes\class-sendpress-ajax-loader.php
[2013.10.07 17:31:35 | 000,001,099 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\sendpress\classes\selective-loader.php
[2014.06.06 20:48:30 | 000,001,266 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\src\main\php\add-ons\wordpress\web\options-gui\js\iframe-loader.js
[2014.06.06 20:48:33 | 000,006,947 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\composer\ClassLoader.php
[2014.06.06 20:48:35 | 000,001,443 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\ClosureLoader.php
[2014.06.06 20:48:35 | 000,000,965 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\FileLoader.php
[2014.06.06 20:48:35 | 000,001,760 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\IniFileLoader.php
[2014.06.06 20:48:35 | 000,001,543 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\PhpFileLoader.php
[2014.06.06 20:48:35 | 000,014,229 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\XmlFileLoader.php
[2014.06.06 20:48:35 | 000,011,095 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\iconic\src\main\php\ehough\iconic\loader\YamlFileLoader.php
[2014.06.06 20:48:35 | 000,004,036 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\ApcClassLoader.php
[2014.06.06 20:48:35 | 000,003,051 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\ApcUniversalClassLoader.php
[2014.06.06 20:48:35 | 000,011,762 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\ClassCollectionLoader.php
[2014.06.06 20:48:35 | 000,005,320 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\ClassLoader.php
[2014.06.06 20:48:35 | 000,004,995 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\ComposerClassLoader.php
[2014.06.06 20:48:35 | 000,003,341 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\DebugClassLoader.php
[2014.06.06 20:48:35 | 000,002,088 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\DebugUniversalClassLoader.php
[2014.06.06 20:48:35 | 000,001,770 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\MapClassLoader.php
[2014.06.06 20:48:35 | 000,009,156 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\UniversalClassLoader.php
[2014.06.06 20:48:35 | 000,003,799 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\WinCacheClassLoader.php
[2014.06.06 20:48:35 | 000,003,761 | ---- | M] () -- \xampp\htdocs\wpport\wp-content\plugins\tubepress\vendor\ehough\pulsar\src\main\php\ehough\pulsar\XcacheClassLoader.php
[2013.08.01 13:47:24 | 000,043,875 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\script-loader.php
[2012.10.31 23:01:14 | 000,002,060 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\template-loader.php
[2012.11.30 02:18:08 | 000,003,915 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\images\uploader-icons-2x.png
[2012.11.30 02:18:08 | 000,001,593 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\images\uploader-icons.png
[2012.11.21 22:31:56 | 000,004,244 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\js\customize-loader.js
[2012.11.21 22:31:56 | 000,002,642 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\js\customize-loader.min.js
[2012.01.03 20:04:57 | 000,003,208 | ---- | M] () -- \xampp\htdocs\www\backup\graphics\loader.big.black.gif
[2012.01.03 20:04:57 | 000,003,208 | ---- | M] () -- \xampp\htdocs\www\backup\graphics\loader.big.white.gif
[2012.01.03 20:04:57 | 000,000,668 | ---- | M] () -- \xampp\htdocs\www\backup\graphics\loader.black.gif
[2012.01.03 20:04:57 | 000,000,673 | ---- | M] () -- \xampp\htdocs\www\backup\graphics\loader.white.gif
[2013.03.30 11:28:58 | 000,008,192 | ---- | M] () -- \xampp\mailtodisk\_win32sysloader.pyd
[2012.04.16 17:30:20 | 000,068,096 | ---- | M] () -- \xampp\MercuryMail\loader.exe
[2012.10.16 16:45:46 | 000,015,791 | ---- | M] () -- \xampp\perl\lib\AutoLoader.pm
[2013.03.12 14:01:48 | 000,025,696 | ---- | M] () -- \xampp\perl\lib\DynaLoader.pm
[2013.03.04 16:16:22 | 000,017,377 | ---- | M] () -- \xampp\perl\lib\SelfLoader.pm
[2013.03.12 14:00:00 | 000,010,589 | ---- | M] () -- \xampp\perl\lib\XSLoader.pm
[2013.03.04 16:16:22 | 000,000,490 | ---- | M] () -- \xampp\perl\lib\Locale\Maketext\GutsLoader.pm
[2009.12.20 00:00:00 | 000,001,027 | ---- | M] () -- \xampp\perl\site\lib\Apache2\XSLoader.pm
[2009.12.20 00:00:00 | 000,001,031 | ---- | M] () -- \xampp\perl\site\lib\APR\XSLoader.pm
[2009.12.20 00:00:00 | 000,010,700 | ---- | M] () -- \xampp\perl\site\lib\ModPerl\RegistryLoader.pm
[2005.04.28 01:55:32 | 000,005,746 | ---- | M] () -- \xampp\perl\vendor\lib\Class\Loader.pm
[2001.05.02 04:01:04 | 000,000,648 | ---- | M] () -- \xampp\perl\vendor\lib\Class\LoaderTest.pm
[2012.07.13 19:57:02 | 000,024,325 | ---- | M] () -- \xampp\perl\vendor\lib\YAML\Loader.pm
[2012.04.16 15:30:20 | 000,004,896 | ---- | M] () -- \xampp\php\PEAR\Crypt\RSA\MathLoader.php
[2013.06.18 08:26:20 | 000,006,565 | ---- | M] () -- \xampp\php\PEAR\PEAR\Autoloader.php
[2013.06.18 08:26:20 | 000,066,585 | ---- | M] () -- \xampp\php\PEAR\PEAR\Downloader.php
[2013.06.18 14:16:52 | 000,005,511 | ---- | M] () -- \xampp\php\PEAR\PHPUnit\Runner\StandardTestSuiteLoader.php
[2013.06.18 14:16:52 | 000,002,806 | ---- | M] () -- \xampp\php\PEAR\PHPUnit\Runner\TestSuiteLoader.php
[2013.06.18 14:16:52 | 000,003,814 | ---- | M] () -- \xampp\php\PEAR\PHPUnit\Util\Fileloader.php
[2013.06.18 08:31:54 | 000,004,609 | ---- | M] () -- \xampp\php\PEAR\PHPUnit2\Runner\StandardTestSuiteLoader.php
[2013.06.18 08:31:54 | 000,003,186 | ---- | M] () -- \xampp\php\PEAR\PHPUnit2\Runner\TestSuiteLoader.php
[2013.06.18 08:31:56 | 000,003,767 | ---- | M] () -- \xampp\php\PEAR\PHPUnit2\Util\Fileloader.php
[2013.06.18 14:16:48 | 000,000,334 | ---- | M] () -- \xampp\php\PEAR\Symfony\Component\Yaml\autoloader.php
[2013.06.30 11:01:24 | 000,000,673 | ---- | M] () -- \xampp\phpMyAdmin\doc\html\_static\ajax-loader.gif
[2013.07.02 08:59:12 | 000,020,714 | ---- | M] () -- \xampp\tomcat\webapps\docs\class-loader-howto.html
[2013.07.02 08:59:12 | 000,016,741 | ---- | M] () -- \xampp\tomcat\webapps\docs\config\loader.html

< *minodlogin* /s >

< *tnod* /s >
[2013.10.07 16:53:52 | 000,020,047 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\element\getnodes.class.php
[2013.10.07 16:53:52 | 000,008,247 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\element\propertyset\getnodes.php
[2013.10.07 16:53:52 | 000,018,428 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\resource\getnodes.class.php
[2013.10.07 16:53:52 | 000,001,844 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\security\access\getnodes.php
[2013.10.07 16:53:52 | 000,002,349 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\security\documentgroup\getnodes.php
[2013.10.07 16:53:52 | 000,005,135 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\security\group\getnodes.class.php
[2013.10.07 16:53:52 | 000,002,947 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\security\resourcegroup\getnodes.class.php
[2013.10.07 16:53:52 | 000,003,701 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\system\action\getnodes.class.php
[2013.10.07 16:53:52 | 000,002,489 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\system\menu\getnodes.php
[2013.10.07 16:53:52 | 000,003,681 | ---- | M] () -- \xampp\htdocs\modx\core\model\modx\processors\workspace\packages\rest\getnodes.class.php

< *AutoKMS* /s >

< *activator* /s >
[2013.06.21 15:26:54 | 000,006,561 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\resourcepacks\minecraft\textures\blocks\rail_activator.png
[2013.06.21 15:26:54 | 000,042,267 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\resourcepacks\minecraft\textures\blocks\rail_activator_powered.png
[2013.06.21 16:27:36 | 000,000,022 | ---- | M] () -- \Users\Dana\AppData\Roaming\.minecraft\resourcepacks\minecraft\textures\blocks\rail_activator_powered.png.mcmeta

< *serial* /s >
[2011.10.16 08:29:35 | 000,003,292 | ---- | M] () -- \cygwin\usr\share\doc\gettext\javadoc2\serialized-form.html
[2011.08.30 10:59:37 | 000,006,180 | ---- | M] () -- \cygwin\usr\x86_64-w64-mingw32\sys-root\mingw\lib\libserialui.a
[2014.06.15 21:23:38 | 000,712,704 | ---- | M] () -- \Gmod\bin\dmserializers.dll
[2014.06.15 22:19:06 | 000,712,704 | ---- | M] () -- \Gmod\css\bin\dmserializers.dll
[2009.08.17 23:35:44 | 000,141,168 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Runtime.Serialization.Json.dll
[2009.04.14 10:47:30 | 000,000,464 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Runtime.Serialization.Json.extmap.xml
[2009.06.11 05:20:48 | 000,006,699 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Runtime.Serialization.Json.xml
[2009.08.17 23:35:44 | 000,321,392 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Xml.Serialization.dll
[2009.04.14 10:56:20 | 000,000,437 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Xml.Serialization.extmap.xml
[2009.06.11 05:20:48 | 000,149,896 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\System.Xml.Serialization.xml
[2009.08.17 23:35:44 | 000,022,408 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\de\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\de\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,022,408 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\es\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,046,968 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\es\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,022,936 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\fr\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,046,968 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\fr\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,022,424 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\it\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,046,968 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\it\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,034,712 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\ja\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,051,072 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\ja\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,022,408 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\ko\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,046,968 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\ko\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,030,616 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\zh-Hans\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,042,880 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\zh-Hans\System.Xml.Serialization.Resources.dll
[2009.08.17 23:35:44 | 000,030,616 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\zh-Hant\System.Runtime.Serialization.Json.Resources.dll
[2009.08.17 23:35:44 | 000,042,872 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v3.0\Libraries\Client\zh-Hant\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,141,184 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Runtime.Serialization.Json.dll
[2009.04.14 10:47:30 | 000,000,464 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Runtime.Serialization.Json.extmap.xml
[2010.02.26 03:01:10 | 000,006,753 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Runtime.Serialization.Json.xml
[2010.04.01 01:46:10 | 000,321,392 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Xml.Serialization.dll
[2009.04.14 10:56:20 | 000,000,437 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Xml.Serialization.extmap.xml
[2010.03.06 06:00:46 | 000,152,855 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\System.Xml.Serialization.xml
[2010.04.01 01:46:10 | 000,021,912 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\de\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\de\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,021,912 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\es\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\es\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,022,936 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\fr\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\fr\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,021,912 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\it\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\it\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,034,712 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ja\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,051,072 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ja\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,021,912 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ko\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,046,976 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ko\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,026,008 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ru\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,055,168 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\ru\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,030,616 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\zh-Hans\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,042,880 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\zh-Hans\System.Xml.Serialization.Resources.dll
[2010.04.01 01:46:10 | 000,030,616 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\zh-Hant\System.Runtime.Serialization.Json.Resources.dll
[2010.04.01 01:46:10 | 000,042,880 | ---- | M] () -- \Program Files (x86)\Microsoft SDKs\Silverlight\v4.0\Libraries\Client\zh-Hant\System.Xml.Serialization.Resources.dll
[2014.05.13 23:17:02 | 000,434,368 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.30514.0\System.Runtime.Serialization.dll
[2014.07.24 23:50:47 | 001,164,288 | ---- | M] () -- \Program Files (x86)\Microsoft Silverlight\5.1.30514.0\System.Runtime.Serialization.ni.dll
[2010.03.18 20:31:26 | 000,370,552 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v3.5\Profile\Client\System.Runtime.Serialization.dll
[2010.03.18 20:31:26 | 000,042,904 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v3.5\Profile\Client\System.Runtime.Serialization.Formatters.Soap.dll
[2010.03.18 20:31:26 | 000,429,432 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.0\System.Runtime.Serialization.dll
[2010.03.18 20:31:26 | 000,032,664 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.0\System.Runtime.Serialization.Formatters.Soap.dll
[2010.03.18 20:31:26 | 000,429,432 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.0\Profile\Client\System.Runtime.Serialization.dll
[2010.03.18 20:31:26 | 000,032,664 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.0\Profile\Client\System.Runtime.Serialization.Formatters.Soap.dll
[2009.08.17 22:34:48 | 000,415,592 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v3.0\System.Runtime.Serialization.dll
[2009.06.11 05:20:48 | 000,165,919 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v3.0\system.runtime.serialization.xml
[2009.08.17 23:09:06 | 000,063,384 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v3.0\en-us\System.Runtime.Serialization.debug.resources.dll
[2010.04.01 00:28:42 | 000,419,704 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v4.0\System.Runtime.Serialization.dll
[2010.03.09 02:42:30 | 000,176,857 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v4.0\system.runtime.serialization.xml
[2010.04.01 01:02:32 | 000,063,384 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\Silverlight\v4.0\en-us\System.Runtime.Serialization.debug.resources.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2014.06.11 19:35:23 | 000,712,704 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\bin\dmserializers.dll
[2014.06.09 18:18:00 | 000,712,704 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\bin\dmserializers.dll
[2011.08.21 03:09:16 | 000,003,835 | ---- | M] () -- \Program Files (x86)\StepMania 5\Themes\_fallback\Scripts\02 Serialize.lua
[2014.05.13 23:48:16 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.30514.0\System.Runtime.Serialization.dll
[2014.07.24 23:51:34 | 001,546,240 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.30514.0\System.Runtime.Serialization.ni.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2012.04.11 01:15:28 | 000,434,288 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.dll
[2012.05.16 11:38:09 | 001,164,288 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.ni.dll
[2012.04.11 04:37:58 | 000,434,288 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Program Files\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.dll
[2012.05.16 11:38:47 | 001,546,240 | ---- | M] () -- \System Volume Information\SystemRestore\FRStaging\Program Files\Microsoft Silverlight\5.1.10411.0\System.Runtime.Serialization.ni.dll
[2013.09.03 04:36:28 | 000,001,675 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-128.png
[2013.09.03 05:01:06 | 000,002,643 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-256.png
[2013.09.03 04:08:20 | 000,000,203 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-26.png
[2013.09.03 04:11:16 | 000,000,572 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-32.png
[2013.09.03 04:24:02 | 000,000,754 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-48.png
[2013.09.03 11:04:08 | 000,005,341 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-512_.png
[2013.09.03 04:28:38 | 000,000,917 | ---- | M] () -- \Users\Dana\Documents\prace\!resources\Floral Patterns\windows8_icons\Business\serial_tasks\serial_tasks-64.png
[2014.06.26 22:05:47 | 000,003,589 | ---- | M] () -- \Users\Dana\Documents\prace\mince\system\PHPExcel\Classes\PHPExcel\CachedObjectStorage\MemorySerialized.php
[2014.06.26 22:05:49 | 000,003,917 | ---- | M] () -- \Users\Dana\Documents\prace\mince\system\PHPExcel\Classes\PHPExcel\Reader\Serialized.php
[2014.06.26 22:05:56 | 000,005,520 | ---- | M] () -- \Users\Dana\Documents\prace\mince\system\PHPExcel\Classes\PHPExcel\Writer\Serialized.php
[2014.07.20 09:35:27 | 000,004,119 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\testy\admin\libs\PHPExcel\Reader\Serialized.php
[2014.07.20 09:36:32 | 000,006,163 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\testy\admin\libs\PHPExcel\Writer\Serialized.php
[2014.07.20 09:40:52 | 000,000,814 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\backup0714\wp-includes\js\jquery\jquery.serialize-object.js
[2013.08.23 15:16:35 | 000,004,119 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\united\testy\admin\libs\PHPExcel\Reader\Serialized.php
[2013.08.23 15:16:44 | 000,006,163 | ---- | M] () -- \Users\Dana\Documents\prace\studynet\united\testy\admin\libs\PHPExcel\Writer\Serialized.php
[2014.07.09 18:39:31 | 000,000,814 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wordpress\wp-includes\js\jquery\jquery.serialize-object.js
[2014.07.09 18:37:07 | 000,000,814 | ---- | M] () -- \Users\Dana\Documents\prace\tereza\www\wp-includes\js\jquery\jquery.serialize-object.js
[2011.09.28 22:04:06 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.02.14 10:26:36 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\553e7bfc9cac5e4feaa83d8ee1e187bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.14 13:00:25 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f177ea74036d5fdc6c6b9c967dc877cf\System.Runtime.Serialization.ni.dll
[2014.02.14 10:21:49 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\8653acb87b4a219a84e4ce58df35e62a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.14 10:34:49 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\b73fbf8a2db2192752ad2b13744a393b\System.Runtime.Serialization.ni.dll
[2014.02.14 00:23:23 | 000,309,760 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\abb3fbf787b74b7d2513a8c409b5ef74\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.14 00:23:23 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\abb3fbf787b74b7d2513a8c409b5ef74\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2014.02.14 00:23:38 | 002,825,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll
[2014.02.14 00:23:38 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll.aux
[2014.02.14 13:06:36 | 000,026,624 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\94ce7a3b39b335283a0087f9964e9099\System.Xml.Serialization.ni.dll
[2014.02.14 13:06:36 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\94ce7a3b39b335283a0087f9964e9099\System.Xml.Serialization.ni.dll.aux
[2014.02.14 13:13:16 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\3b1e2119f9cdfbc454bf08eb1ed9f023\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.14 13:13:16 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\3b1e2119f9cdfbc454bf08eb1ed9f023\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2014.02.14 13:15:29 | 003,640,320 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\7e7ed14f2b9a7e3d94307462aa99f5b9\System.Runtime.Serialization.ni.dll
[2014.02.14 13:15:29 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\7e7ed14f2b9a7e3d94307462aa99f5b9\System.Runtime.Serialization.ni.dll.aux
[2014.02.14 13:19:07 | 000,028,672 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\7c4a5c747f2dcdac0329022b43a7be6b\System.Xml.Serialization.ni.dll
[2014.02.14 13:19:07 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\7c4a5c747f2dcdac0329022b43a7be6b\System.Xml.Serialization.ni.dll.aux
[2013.09.11 23:33:38 | 000,027,920 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.09.11 23:33:38 | 000,133,344 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2013.09.11 22:21:54 | 000,022,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2013.09.11 23:33:38 | 000,113,864 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2013.09.11 23:33:38 | 001,052,320 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.09.11 22:21:54 | 000,036,480 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2013.09.11 22:21:54 | 000,022,656 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 23:33:38 | 001,052,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2013.09.11 23:33:38 | 000,133,344 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2013.09.11 22:21:54 | 000,022,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2013.09.11 22:21:54 | 000,036,480 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2013.09.11 22:21:54 | 000,022,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2013.09.11 23:33:38 | 000,027,920 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.09.11 23:33:38 | 000,113,864 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 23:33:38 | 001,052,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2013.09.11 23:33:38 | 000,133,344 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll
[2013.09.11 22:21:54 | 000,022,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2013.09.11 22:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2013.09.11 22:21:54 | 000,036,480 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2013.09.11 22:21:54 | 000,022,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll
[2013.09.11 21:32:16 | 000,027,920 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.09.11 21:32:16 | 000,113,864 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2011.09.28 22:03:57 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009.07.14 04:10:04 | 000,005,120 | ---- | M] () -- \Windows\System32\en-US\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2011.09.28 22:03:57 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2009.07.14 04:10:04 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\en-US\serialui.dll.mui
[2011.09.28 22:04:02 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1c215c9ac50719c5\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2011.09.28 22:04:07 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009.07.14 04:26:50 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_edb61e94e4562781\serialui.dll.mui
[2009.07.14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2011.09.28 22:04:16 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_b96904386c2fe002\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2011.09.28 22:04:10 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009.07.14 04:30:28 | 000,010,240 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64015f894ce7c72a\serial.sys.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2009.06.10 22:30:46 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c\System.Runtime.Serialization.dll
[2010.11.05 03:52:16 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012.10.05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2009.06.10 22:30:43 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05\System.Runtime.Serialization.dll
[2010.11.05 03:52:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012.10.05 12:56:11 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2011.09.29 11:14:06 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011.09.29 11:14:06 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2011.09.28 22:04:31 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009.07.14 07:37:34 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_edb61e94e4562781_serialui.dll.mui_7d29d2a3
[2009.07.14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2011.09.28 22:04:33 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 07:37:35 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b_serialui.dll.mui_7d29d2a3
[2009.07.14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011.02.05 15:10:43 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16757_none_6dccf6b5c641c933.manifest
[2011.02.05 15:05:47 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.20897_none_6e2b53d0df7fd8c1.manifest
[2011.02.05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011.02.05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009.07.14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2009.07.14 04:26:23 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c.manifest
[2010.11.20 06:21:24 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012.10.05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012.10.05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2009.07.14 04:27:09 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05.manifest
[2010.11.20 06:22:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012.10.05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012.10.05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2011.09.28 22:02:40 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2009.07.14 04:42:40 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012.10.05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012.10.05 21:59:28 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2012.10.05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2011.09.28 22:04:06 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012.10.05 12:56:07 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2011.09.28 22:04:16 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012.10.05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2011.09.28 22:04:07 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_267606ecf967dbc0\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011.09.28 22:03:57 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 04:10:04 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_en-us_919783112bf8b64b\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2011.09.28 22:04:16 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012.10.05 12:56:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll
[2012.06.16 21:50:50 | 000,001,919 | ---- | M] () -- \xampp\htdocs\portfolio\modules\cwsoft-anynews\thirdparty\better-coda-slider\jquery-plugins\jquery.serialScroll-min.js
[2011.01.20 23:09:38 | 000,000,783 | ---- | M] () -- \xampp\htdocs\shop\wp-includes\js\jquery\jquery.serialize-object.js
[2011.01.20 23:09:38 | 000,000,783 | ---- | M] () -- \xampp\htdocs\studynet\wp-includes\js\jquery\jquery.serialize-object.js
[2011.01.20 23:09:38 | 000,000,783 | ---- | M] () -- \xampp\htdocs\tereza\wp-includes\js\jquery\jquery.serialize-object.js
[2013.08.23 16:19:51 | 000,004,119 | ---- | M] () -- \xampp\htdocs\testy\testy\admin\libs\PHPExcel\Reader\Serialized.php
[2013.08.23 16:19:58 | 000,006,163 | ---- | M] () -- \xampp\htdocs\testy\testy\admin\libs\PHPExcel\Writer\Serialized.php
[2012.06.16 21:50:50 | 000,001,919 | ---- | M] () -- \xampp\htdocs\wb\modules\cwsoft-anynews\thirdparty\better-coda-slider\jquery-plugins\jquery.serialScroll-min.js
[2013.09.05 09:44:01 | 000,000,783 | ---- | M] () -- \xampp\htdocs\wp\wp-includes\js\jquery\jquery.serialize-object.js
[2011.01.20 23:09:38 | 000,000,783 | ---- | M] () -- \xampp\htdocs\wpport\wp-includes\js\jquery\jquery.serialize-object.js
[2009.12.20 00:00:00 | 000,002,030 | ---- | M] () -- \xampp\perl\site\lib\SOAP\Deserializer.pod
[2009.12.20 00:00:00 | 000,013,276 | ---- | M] () -- \xampp\perl\site\lib\SOAP\Serializer.pod
[2010.06.03 17:33:26 | 000,002,032 | ---- | M] () -- \xampp\perl\vendor\lib\SOAP\Deserializer.pod
[2011.08.15 21:28:44 | 000,013,279 | ---- | M] () -- \xampp\perl\vendor\lib\SOAP\Serializer.pod
[2008.12.22 12:55:36 | 000,060,332 | ---- | M] () -- \xampp\php\PEAR\.registry\xml_serializer.reg
[2012.04.16 15:30:20 | 000,040,836 | ---- | M] () -- \xampp\php\PEAR\XML\Serializer.php
[2012.04.16 15:30:20 | 000,029,989 | ---- | M] () -- \xampp\php\PEAR\XML\Unserializer.php

< *w7lxe* /s >

========== Files - Unicode (All) ==========
[2013.12.31 12:02:45 | 208,741,671 | ---- | M] ()(C:\Users\Dana\Documents\? Dark Celtic Music - Spirit Rituals And Beautiful Spiritual Mix - YouTube [360p].mp4) -- C:\Users\Dana\Documents\▶ Dark Celtic Music - Spirit Rituals And Beautiful Spiritual Mix - YouTube [360p].mp4
[2013.12.31 12:02:22 | 208,741,671 | ---- | C] ()(C:\Users\Dana\Documents\? Dark Celtic Music - Spirit Rituals And Beautiful Spiritual Mix - YouTube [360p].mp4) -- C:\Users\Dana\Documents\▶ Dark Celtic Music - Spirit Rituals And Beautiful Spiritual Mix - YouTube [360p].mp4
[2013.09.30 08:58:21 | 098,474,456 | ---- | M] ()(C:\Windows\SysWow64\???G) -- C:\Windows\SysWow64\゠埫G
[2013.09.30 08:58:21 | 098,474,456 | ---- | M] ()(C:\Windows\System32\???G) -- C:\Windows\System32\゠埫G
[2013.09.30 08:58:21 | 098,474,456 | ---- | C] ()(C:\Windows\SysWow64\???G) -- C:\Windows\SysWow64\゠埫G
[2013.09.28 08:36:44 | 098,372,650 | ---- | M] ()(C:\Windows\SysWow64\???) -- C:\Windows\SysWow64\瞧
[2013.09.28 08:36:44 | 098,372,650 | ---- | M] ()(C:\Windows\System32\???) -- C:\Windows\System32\瞧
[2013.09.28 08:36:44 | 098,372,650 | ---- | C] ()(C:\Windows\SysWow64\???) -- C:\Windows\SysWow64\瞧
[2013.09.23 09:13:13 | 098,615,842 | ---- | M] ()(C:\Windows\SysWow64\???L) -- C:\Windows\SysWow64\ꋎ㦢£
[2013.09.23 09:13:13 | 098,615,842 | ---- | M] ()(C:\Windows\System32\???L) -- C:\Windows\System32\ꋎ㦢£
[2013.09.23 09:13:13 | 098,615,842 | ---- | C] ()(C:\Windows\SysWow64\???L) -- C:\Windows\SysWow64\ꋎ㦢£
[2013.09.18 08:41:53 | 098,106,403 | ---- | M] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\�ଏ
[2013.09.18 08:41:53 | 098,106,403 | ---- | M] ()(C:\Windows\System32\????) -- C:\Windows\System32\�ଏ
[2013.09.18 08:41:53 | 098,106,403 | ---- | C] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\�ଏ
[2013.09.02 08:51:06 | 095,199,985 | ---- | M] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\╴ꠋ
[2013.09.02 08:51:06 | 095,199,985 | ---- | M] ()(C:\Windows\System32\????) -- C:\Windows\System32\╴ꠋ
[2013.09.02 08:51:06 | 095,199,985 | ---- | C] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\╴ꠋ
[2013.09.01 09:00:22 | 095,128,664 | ---- | M] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\⎈지
[2013.09.01 09:00:22 | 095,128,664 | ---- | M] ()(C:\Windows\System32\????) -- C:\Windows\System32\⎈지
[2013.09.01 09:00:22 | 095,128,664 | ---- | C] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\⎈지

< End of report >

OTL Extras logfile created on: 26.7.2014 11:06:08 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dana\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 21,81% Memory free
8,00 Gb Paging File | 4,43 Gb Available in Paging File | 55,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 215,42 Gb Free Space | 46,26% Space Free | Partition Type: NTFS

Computer Name: HOME | User Name: Dana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)

[HKEY_USERS\S-1-5-21-1602808253-430055931-27258192-1001\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found
.cmd [@ = cmdfile] -- Reg Error: Key error. File not found
.com [@ = ComFile] -- Reg Error: Key error. File not found
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.pif [@ = piffile] -- Reg Error: Key error. File not found
.txt [@ = txtfile] -- C:\Windows\NOTEPAD.EXE (Microsoft Corporation)
.vbs [@ = VBSFile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{015030FA-951D-4E39-A76F-F92A897AE554}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{0C6BC6A3-0D50-4FD7-ABB8-5C9AD905AE1D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{0CE0613F-33B7-473A-9388-21EEDFB27EAF}" = rport=137 | protocol=17 | dir=out | app=system |
"{0F7C3C42-E921-4C47-8AFD-56B141EE96B5}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{1675B726-901F-4F93-9DDB-252B3DB2013E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A185AEA-7298-4F82-A3CD-37B783F6CC78}" = rport=138 | protocol=17 | dir=out | app=system |
"{1AB26722-084C-4523-8FD4-0A54DDFBF114}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{21BB9E6F-4442-46B0-B449-B4EC16F01FC7}" = rport=10243 | protocol=6 | dir=out | app=system |
"{2365EF6B-0EA6-4BCC-B3FA-E556F99A9A32}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{263D1FC0-5B75-475A-8FD9-CDF6DC18015E}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{2BEC90D2-C844-4C89-AA29-D50D7E18B7B6}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{3B22B442-EC1A-4DBB-B35A-0F54686A8706}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3B7E6336-860D-4F15-87CF-69FD9FA39A7B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3E1A2A35-F280-4DD9-B04F-792408A8A6C5}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{468DBD16-9CDD-4BDD-BFA6-DF57DBE5C555}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{4C093BD7-AC7D-41DF-92E6-5A5273CE8E1C}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{50CD1A8C-D1DD-4065-8236-2FD02FDE6E57}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{5A87C13E-F38E-4AC6-BB29-CB6C9A281B24}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{5BAC23EA-50EB-4EE8-A2D6-3AB244064D38}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{5BC63B27-A5FB-4C45-9D71-23355CF71708}" = lport=137 | protocol=17 | dir=in | app=system |
"{5E60D546-37A4-45F5-A3DA-743908E2B1C4}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{5F1776C9-A3F8-475A-B706-0B844245B700}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{632E75E2-5848-4C0C-B493-5A633FF8661E}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{67B60D26-8F24-4C46-8440-37606AED5332}" = lport=139 | protocol=6 | dir=in | app=system |
"{7362A7BB-9E36-474F-B92F-238B27155F8F}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{77782029-0A75-4B03-8239-DE7363EDF54B}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{791B7230-E757-4004-98C8-31DA544AA4C4}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{7D1A284E-0D38-40BB-8EBD-73AF9CFF44F4}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{7DC3B558-8195-4C71-8104-F446091F2872}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{7EAAA7E4-1758-4B7F-811C-920A8760E52A}" = lport=10243 | protocol=6 | dir=in | app=system |
"{808B99FC-AD06-481F-92D6-C9E9E25CF934}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{82A902AC-7FB8-46E2-8C7A-EEDD86C8BC16}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{844E4197-52C9-48E6-81C1-602BF247F371}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{90F856FD-D9E4-4B2F-83FC-FA9DDF87BB7D}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{96F4BE7F-162F-42A6-A4CB-86E75894D82D}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{9C4A4B52-073B-4570-9A72-1A4D17F650CE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9EADB41D-8BE0-4474-B3CC-CCCE6AE08F8C}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{A2B803DB-6C92-46D8-A848-B20A9D783B32}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{A515BA66-A6CF-4981-B45D-34B245908CB8}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{A8ED6B7B-EF32-47B6-88B2-840B0F28B0C4}" = rport=139 | protocol=6 | dir=out | app=system |
"{B2F54DF1-846D-4319-8DB5-D4EB88E34AF3}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C7D4416A-9D90-43F7-A5A6-7D97571FC586}" = lport=138 | protocol=17 | dir=in | app=system |
"{CE7042A0-E911-4DBE-B723-364979EDC297}" = rport=445 | protocol=6 | dir=out | app=system |
"{D2409127-8AC3-4BB5-A117-247E4075981A}" = lport=445 | protocol=6 | dir=in | app=system |
"{DDDC4170-7D2D-4AAA-BDB9-51B792EDF78B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DF30120E-9D7B-4E1A-87B5-9A5678A4A8A7}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E5A5FC74-E9F5-4DA4-A5CA-462F4B94D65E}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{EA77CFF3-F226-498F-9874-F78F35465CE1}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{EB2733F1-AF04-41CC-88D7-83B0C1390F75}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F064B910-086A-44A5-9B85-4B79C242AE0F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F3C9EB65-89D2-4CF7-B3D7-B4E4815C3E0D}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{FA48E0C8-C9AC-44ED-9FFC-92E4A3BB0A49}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{FB5612CD-50F4-4797-9737-D22833CCE43E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02085248-5C67-46A1-A6A9-72BC53F0B624}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0446211B-8857-4CD7-A6C9-D49B732A48AC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{06873786-7FAC-4AF8-94B8-4CF1A8D9673C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{07165046-4ACC-41D7-8F29-FDD75AC64833}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{092ABAA7-04B6-4295-951A-C81D80A7C23D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{0ABBA65F-78F0-4231-8B4D-68FE4C7E57A6}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{0B0301BD-1BD6-4F45-A738-7348C7393EA2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{0EA597BF-5550-4F63-BF94-2207ECF51C58}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{1549D4EF-B16E-4BD2-83D9-DB68E19CA629}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{16642828-D430-4FF4-BF59-B54DB60A26C8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{1972A841-39CE-454B-AC08-1BCBBFF93BA4}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{1A336342-70B2-4BA8-9F91-8E49C073BF08}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{1AC3B195-BA5A-4B92-B478-46F676169448}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{1C6E27DA-E3F7-4DF3-95E5-2BB497F1B059}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{1D0604B8-760F-4B8F-A9F8-CE8F1321598F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe |
"{1E2C8374-0B40-459F-939C-29EB3C35AF03}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{204A3EE3-292B-4D68-940A-73A20CE0F479}" = protocol=6 | dir=in | app=c:\program files (x86)\zaklínač - rozšířená edice\launcher.exe |
"{231855AE-F765-4DE7-A821-EE9D06207AA2}" = protocol=6 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{241F73EC-BA2A-4220-B64F-CB25A73CE258}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{28140E26-63CA-48FB-A39B-6A57AEB67BFF}" = protocol=17 | dir=in | app=c:\users\dana\appdata\roaming\dropbox\bin\dropbox.exe |
"{2E75E6CB-DC1C-45E3-9F46-7A0DD2DA2562}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{358545EE-38AE-4E81-9329-662467F8F714}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3A3664A0-59D5-43ED-A6A2-03929AEAA7B0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{3FDA60E9-DB8A-4BE7-9CF6-500EEBDA1DEA}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{4097E0CB-F69A-43FD-879C-A52661D09F98}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{410DBAE9-5767-448B-A1A0-419F5C08D1CD}" = protocol=6 | dir=in | app=c:\users\dana\appdata\roaming\dropbox\bin\dropbox.exe |
"{414E931F-D317-444E-A7E8-E1C43ADE8AE6}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{4B126E31-DEFB-4884-BA5D-43E018231A5D}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\soft602\langserv.exe |
"{4CFEE2DA-EAF4-49F9-875E-9B8C87F5A619}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\assassin's creed 3\ac3mp.exe |
"{4E2F6E5C-F0EA-4FA3-81E3-16CD38FAA402}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{58547509-DAF9-4FBB-B3DF-7903F39A8F10}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{596F097D-34E3-476D-ABDC-431626F5351E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{5A2D9039-7CEC-41D3-8E01-94EA37E3EC89}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{5AF37AFE-83A3-494E-808D-A49625FB85DA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5B35E006-B3DE-4BD2-9E71-D77D5ACCB240}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{5D18B3C0-5B79-41B2-A92B-9EA3E5D2A8A2}" = protocol=17 | dir=in | app=c:\gmod\srcds.exe |
"{5F5497B7-7D85-4380-AEC9-AF27B1024D3F}" = protocol=17 | dir=in | app=c:\program files (x86)\checkpoint\zonealarm\vsmon.exe |
"{5FE27C20-32E1-4361-AA02-D3A56CE05DBA}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{61DD4A32-B67A-4F4E-90AA-36109655B539}" = dir=in | app=c:\program files (x86)\google\chrome remote desktop\36.0.1985.102\remoting_host.exe |
"{63B7FA96-0A21-4279-A317-A7718A63E495}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{640681ED-B5E2-4CAD-8DEE-49AA497FEA85}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{6A00E6CC-34CC-474F-B10C-8D0CBD73F1C8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{6CF5FE1E-33FB-4344-B755-6478BC0507D9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{71371871-BD04-440D-A33A-F8B3E09880EE}" = protocol=6 | dir=in | app=c:\gmod\srcds.exe |
"{7222FDE2-C5C2-4401-9BD2-C850120AB623}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{774A3C3D-24E5-4780-A426-70FD30BC234E}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{7A27C489-C553-4ABD-8A8A-D775434B2035}" = protocol=6 | dir=out | app=system |
"{7A6686FF-8A53-42D1-930F-A5C104BA65EA}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{7CE5A1D9-1DC6-4231-93D4-8D420E8A5178}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{85872A5C-06E6-4A35-B0EE-02EC93518167}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{88B6BC9E-D944-45DC-9059-7B3C4A847BDE}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\soft602\langserv.exe |
"{8A29904C-72B8-4726-9C57-756C5A1D3C4B}" = protocol=6 | dir=in | app=c:\program files (x86)\trillian\plugins\skypekit.exe |
"{92E5738C-7676-41E2-B4B1-B76CBAB561C2}" = protocol=17 | dir=in | app=c:\windows\syswow64\msiexec.exe |
"{94938B91-CFF4-4111-B038-DF54BB6A883D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9A07C948-59B3-4055-BA74-D3668D748573}" = protocol=17 | dir=in | app=c:\users\dana\appdata\roaming\dropbox\bin\dropbox.exe |
"{9AADFAC7-6195-4706-AA7E-037261AA7425}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{9B6D73BA-9D7F-4DEA-973F-CD89730A57B2}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9E5AB7D6-019B-44BA-9583-91C39E026D76}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{A3189A2E-77C9-4A4C-A3FD-3904D68DAE62}" = protocol=6 | dir=in | app=c:\program files (x86)\checkpoint\zonealarm\vsmon.exe |
"{A32B81C8-3163-4F65-A0A4-8B6F9DF91CDD}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{A63984BB-1584-492D-AE5F-A9E25AFFF9A1}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{AC321E52-F5EC-4D2E-A0EB-32AD75F28227}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AF87208D-2B71-49C1-AB9A-692CB73E92C5}" = protocol=6 | dir=in | app=c:\program files (x86)\checkpoint\zonealarm\vsmon.exe |
"{B19CFBFE-D5FE-4248-A609-17F720F85F9F}" = protocol=6 | dir=in | app=c:\users\dana\appdata\roaming\dropbox\bin\dropbox.exe |
"{B38893DD-013D-41EE-B1C4-897B295CE27A}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{B566A2B1-DA85-42BB-9B5C-D9BA30A04810}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe |
"{B60A6525-B5F0-4776-AFA0-816FF749A337}" = protocol=17 | dir=in | app=c:\program files (x86)\checkpoint\zonealarm\vsmon.exe |
"{B719E4B2-8369-4346-B2A5-6E74E901DDDE}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"{D0BD900D-0F2D-4248-8719-FFEBD20D6AB0}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D333A6B8-3CE8-451A-A6B8-910A4727DFB4}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"{D5E2BC8D-CA93-4299-B4E8-60F8463B7CBD}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{D7369227-C164-4291-B08D-F18D42D22BAD}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{D85A3734-AE87-4B3E-809E-830151FC6A88}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DCA3E672-A9FE-43B2-9E4E-5747E3140C49}" = protocol=17 | dir=in | app=c:\program files (x86)\trillian\plugins\skypekit.exe |
"{DD0B58B0-60B8-4A84-9798-1F90CD80C8DE}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{DE44E905-1323-4C78-AE92-04483FF72380}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DF790182-21A5-4B3D-860B-B5044C427DAB}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{E06C2D6A-D96F-4717-8D63-016FA7C589F1}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{E4D075FE-4A74-4283-95A7-3F5095341492}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\assassin's creed 3\ac3sp.exe |
"{E4D15B22-93A5-498A-9949-7C20A66FB98B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{E839D8AD-C5AA-4C00-87E2-9E6A06D701B2}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe |
"{EC6C0761-C50E-4E40-B64F-1D1169C5D70A}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{EF2845DF-C458-4A69-85F1-583EB8D6BE8B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F1CC20A4-A0A4-434C-AA38-CA6A8DDD4472}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{F2078899-EE67-45F4-9CC7-6021B5B2EE9C}" = protocol=17 | dir=in | app=c:\program files (x86)\zaklínač - rozšířená edice\launcher.exe |
"{F278AE64-79DD-44C7-B844-E081F72AF9E7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\assassin's creed 3\ac3mp.exe |
"{FCCC50CB-6118-4768-8FB3-D374CC6DCCE7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\assassin's creed 3\ac3sp.exe |
"TCP Query User{C4A1D5A8-23B7-4A3A-9F9E-390357AF1534}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"TCP Query User{CDE07645-37F3-4551-BC94-EEB9B406BB7D}C:\program files (x86)\trillian\plugins\skypekit.exe" = protocol=6 | dir=in | app=c:\program files (x86)\trillian\plugins\skypekit.exe |
"TCP Query User{E37A953E-F649-45CF-81D3-CE441935C15A}C:\gmod\srcds.exe" = protocol=6 | dir=in | app=c:\gmod\srcds.exe |
"UDP Query User{07DCB6F7-E83A-45E8-96B3-5CCC22CE93D0}C:\gmod\srcds.exe" = protocol=17 | dir=in | app=c:\gmod\srcds.exe |
"UDP Query User{A67B41A3-7773-4EB3-94B4-459CAEE118FB}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"UDP Query User{EA9CF5C8-E0EC-46A5-84B7-33C5B1C11962}C:\program files (x86)\trillian\plugins\skypekit.exe" = protocol=17 | dir=in | app=c:\program files (x86)\trillian\plugins\skypekit.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}" = iTunes
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{26A24AE4-039D-4CA4-87B4-2F86417055FF}" = Java 7 Update 55 (64-bit)
"{3156336D-8E44-3671-A6FE-AE51D3D6564E}" = Microsoft Windows SDK for Windows 7 (7.1)
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4C296BF8-1A08-4C8D-A4B3-16FB6AECEF20}" = calibre 64bit
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{50813B8C-FCBB-3C61-8039-EAAA93029066}" = Microsoft .NET Framework 4.5.1 (CSY)
"{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 337.88
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 337.88
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 337.88
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 337.88
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.13.1220
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 14.6.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 14.6.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.23
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}" = Apple Mobile Device Support
"62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 7.2.0.1319
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.10
"KLiteCodecPack64_is1" = K-Lite Codec Pack 9.6.0 (64-bit)
"Recuva" = Recuva
"SDKSetup_7.1.7600.0.30514" = Microsoft Windows SDK for Windows 7 (7.1)
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 5.01 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}" = CorelDRAW Graphics Suite X3
"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A3925EA-5B0E-401B-A189-7419149747B2}" = Adobe AIR
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7
"{1C997E1C-5CE9-4AF3-AAA9-DC65E6090827}" = Microsoft Expression Blend SDK for Silverlight 4
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{220C463A-2890-4C7F-B97C-C49FE175B849}" = OpenOffice 4.0.1
"{256E7DAC-9BE8-494E-8DE7-7857BF96B774}" = Microsoft Expression Blend 3 SDK
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = MPC-HC 1.7.0
"{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 55
"{29373274-977E-413C-A4DE-DC0F8E80C429}" = Nokia Connectivity Cable Driver
"{2E9C0CF2-6FD1-417E-A5A1-5AE93C0032DF}" = Chrome Remote Desktop Host
"{32C74893-0243-4235-A6F3-201F0E5D2C03}" = Software602 Print2PDF
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1" = Foxit Cloud
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4DD36DA0-453D-481F-B218-F3C83016C603}" = G-Mapper
"{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}" = FontNav
"{55031CEF-CE75-4A5C-8DEA-60577820529B}" = LG United Mobile Drivers
"{5EE6E987-1B79-4A93-832B-27472C7D1579}" = WPF Toolkit February 2010 (Version 3.5.50211.1)
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{670A9A20-E29D-40C3-9937-2AFF89C3AC82}_is1" = PROFIT 2014.03
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1" = Poedit
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}" = PC Connectivity Solution
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7130468A-F53F-4698-8C09-A339EA3B05E6}" = Nokia Software Updater
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.16
"{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}" = CorelDRAW Graphics Suite X3
"{801B0DA3-A3FF-46CC-B97F-D76D510AF5AE}" = Microsoft Silverlight 4 SDK
"{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{85262A06-2D8C-4BC1-B6ED-5A705D09CFFC}" = Apache HTTP Server 2.2.22
"{86ACE727-A4F2-4B28-A37D-254D9CC03156}" = Zaklínač - Rozšířená edice
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1" = Ashampoo Burning Studio 6 FREE v.6.84
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B3A1C97-A361-463E-8817-444F9F88CDFE}" = Microsoft Expression Blend SDK for .NET 4
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed(R) III v1.06
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B8936C0A-26EB-4133-956D-DF6F0D7175E5}" = ZoneAlarm Security
"{BDA0EB29-8B31-4BF4-8B05-04AA52340AC4}" = LogMeIn Hamachi
"{BF127B80-CFD5-4379-9752-E8AF1A5D0141}" = Microsoft Expression Encoder 4 Screen Capture Codec
"{C20EC80F-6D45-8AC8-298A-786F9A1E8E90}" = Digital Theatre Player
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C94E45B0-6AA6-4FB9-9AAE-22085F631880}" = VBA
"{CCF7074B-BE72-44E1-9CAC-3FFAC582C692}" = CZ
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E217A3D4-2FF9-4D5F-9C20-1386E0FF9864}" = LogMeIn
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{EC2ABCAA-0616-4A3E-8227-599DB484C54E}" = ZoneAlarm Firewall
"{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}" = Nokia Suite
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{FA37AF66-D12A-4BC7-B1DE-3D50C05A4EDB}" = Software602 Form Filler
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FC9A3994-84B4-FF36-0BAC-AD82AEFC26A5}" = Správce nastavení aplikace Adobe AIR
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"abrMate_is1" = abrMate version 1.1
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 14 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.1
"AIMP3" = AIMP3
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.80
"Audacity_is1" = Audacity 2.0.2
"Avidemux 2.6 - 64bits (64-bit)" = Avidemux 2.6 - 64bits
"Bodyshop Mechanic.36b" = Bodyshop Mechanic
"CEP - Colour Enable Packages_is1" = CEP (Color Enable Package) v.9.2 (beta)
"com.adobe.air.settings.manager.419D633A757E8B26DD2BDB301927BA7BA7490F38.1" = Správce nastavení aplikace Adobe AIR
"Deluge" = Deluge 1.3.6
"DigitalTheatrePlayer.50FAA36E94B2E1439B0A75CE1D37D773E96BC306.1" = Digital Theatre Player
"DontStarve" = Don't Starve
"DVD Flick_is1" = DVD Flick 1.3.0.7
"FileZilla Client" = FileZilla Client 3.8.1
"Foxit Reader_is1" = Foxit Reader
"Fraps" = Fraps
"Gadwin PrintScreen" = Gadwin PrintScreen
"Google Chrome Frame" = Google Chrome Frame
"GTK2-Runtime" = GTK2-Runtime
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Inkscape" = Inkscape 0.48
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Ovladače zařízení
"KLiteCodecPack_is1" = K-Lite Codec Pack 9.6.0 (Full)
"LAME_is1" = LAME v3.99.3 (for Windows)
"LG PC Suite" = LG PC Suite
"ljArchive" = ljArchive
"LogMeIn Hamachi" = LogMeIn Hamachi
"LochJournal_is1" = LochJournal 2.2
"Mozilla Firefox 31.0 (x86 cs)" = Mozilla Firefox 31.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Nokia Suite" = Nokia Suite
"Notepad++" = Notepad++
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OnTranslator" = OnTranslator
"Open Broadcaster Software" = Open Broadcaster Software
"Opera 21.0.1432.57" = Opera Stable 21.0.1432.57
"PRGrep" = PRGrep
"PSPad editor_is1" = PSPad editor
"PunkBusterSvc" = PunkBuster Services
"Secunia PSI" = Secunia PSI (3.0.0.7011)
"Semagic" = Semagic (remove only)
"Steam" = Steam
"Steam App 208480" = Assassin’s Creed® III
"Steam App 240" = Counter-Strike: Source
"Steam App 4000" = Garry's Mod
"Steam App 72850" = The Elder Scrolls V: Skyrim
"StepMania 5" = StepMania v5.0 alpha 1a (remove only)
"SystemRequirementsLab" = System Requirements Lab
"Trillian" = Trillian
"Uplay" = Uplay
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.3
"xampp" = XAMPP 1.7.7
"Xming_is1" = Xming 6.9.0.31
"Xvid Video Codec 1.3.2" = Xvid Video Codec
"yWriter5_is1" = yWriter5
"ZoneAlarm Free Firewall" = ZoneAlarm Free Firewall
"ZoneAlarm Security Toolbar" = ZoneAlarm Security Toolbar

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1602808253-430055931-27258192-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"AdvTshDesignBase" = AdvancedTshirts DesignBase
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
"Wuala" = Wuala

========== Last 20 Event Log Errors ==========

[ Aladdin Events ]
Error - 10.1.2013 9:08:56 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 10.1.2013 12:12:56 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 10.1.2013 18:12:57 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 11.1.2013 5:39:58 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 11.1.2013 12:38:58 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 11.1.2013 17:07:59 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.1.2013 5:14:47 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.1.2013 11:29:09 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.1.2013 12:43:47 | Computer Name = home | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.1.2013 16:41:39 | Computer Name = home | Source = Aladdin | ID = 107
Description = Connection ID 1 removed. Forced disconnection - admin from HOME

[ Application Events ]
Error - 23.7.2014 2:57:54 | Computer Name = home | Source = Application Hang | ID = 1002
Description = Program chrome.exe verze 36.0.1985.125 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
15a4 Čas spuštění: 01cfa63fb0fcaeff Čas ukončení: 60000 Cesta k aplikaci: C:\Users\Dana\AppData\Local\Google\Chrome\Application\chrome.exe

ID
hlášení: 80410b37-1236-11e4-801c-00248c52f5aa

Error - 23.7.2014 10:52:43 | Computer Name = home | Source = NvStreamSvc | ID = 131073
Description =

Error - 23.7.2014 10:52:43 | Computer Name = home | Source = NvStreamSvc | ID = 131073
Description =

Error - 23.7.2014 10:52:43 | Computer Name = home | Source = NvStreamSvc | ID = 131073
Description =

Error - 23.7.2014 11:17:27 | Computer Name = home | Source = C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe | ID = 131073
Description =

Error - 23.7.2014 13:27:14 | Computer Name = home | Source = chromoting | ID = 3
Description = Přístup klienta zamítnut: dana.svedova@gmail.com/TalkGadgetAD9D1FB2.

Error - 23.7.2014 13:41:51 | Computer Name = home | Source = Application Hang | ID = 1002
Description = Program chrome.exe verze 36.0.1985.125 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
1108 Čas spuštění: 01cfa68c0518ad0b Čas ukončení: 60000 Cesta k aplikaci: C:\Users\Dana\AppData\Local\Google\Chrome\Application\chrome.exe

ID
hlášení: 717211d7-1290-11e4-9925-00248c52f5aa

Error - 23.7.2014 13:56:16 | Computer Name = home | Source = chromoting | ID = 3
Description = Přístup klienta zamítnut: dana.svedova@gmail.com/TalkGadget7F784817.

Error - 24.7.2014 4:02:47 | Computer Name = home | Source = Application Hang | ID = 1002
Description = Program chrome.exe verze 36.0.1985.125 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
1b5c Čas spuštění: 01cfa71565987387 Čas ukončení: 60000 Cesta k aplikaci: C:\Users\Dana\AppData\Local\Google\Chrome\Application\chrome.exe

ID
hlášení: bb383c08-1308-11e4-b4c1-00248c52f5aa

Error - 24.7.2014 4:06:01 | Computer Name = home | Source = Application Hang | ID = 1002
Description = Program Avira.OE.Setup.Bundle.exe verze 1.1.17.31000 přestal spolupracovat
se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: bc4 Čas spuštění: 01cfa7160a7af707 Čas ukončení: 5 Cesta k aplikaci: C:\ProgramData\Package
Cache\{142be4a8-895b-4ed9-b1ff-11c76357e3df}\Avira.OE.Setup.Bundle.exe ID hlášení:
5882f8f2-1309-11e4-b4c1-00248c52f5aa

[ OSession Events ]
Error - 15.10.2013 5:29:18 | Computer Name = home | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 36
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 23.7.2014 11:01:08 | Computer Name = home | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 23.7.2014 11:01:09 | Computer Name = home | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 23.7.2014 11:09:13 | Computer Name = home | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 23.7.2014 11:13:11 | Computer Name = home | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 23.7.2014 11:13:12 | Computer Name = home | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 23.7.2014 11:13:54 | Computer Name = home | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 23.7.2014 11:14:00 | Computer Name = home | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 23.7.2014 17:37:16 | Computer Name = home | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 23.7.2014 17:41:49 | Computer Name = home | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 26.7.2014 3:04:53 | Computer Name = home | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (9:00:59, ?26.?7.?2014) bylo neočekávané.

< End of report >

Jeste poprosim o aktualni log z RSIT, protoze ten posledni neni cely, nejak mu chybi prostredek

Tady je, snad je celý.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Dana at 2014-07-26 13:50:13
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 220 GB (46%) free of 477 GB
Total RAM: 4095 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:50:27, on 26.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Trillian\trillian.exe
c:\program files (x86)\trillian\plugins\skypekit.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Dana\Documents\XNALara_XPS\XNALara XPS.exe
C:\Program Files (x86)\AIMP3\AIMP3.exe
C:\Program Files (x86)\PSPad editor\PSPad.exe
C:\Program Files\trend micro\Dana.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; 127.0.0.1; <local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll
O3 - Toolbar: ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Startup: Dropbox.lnk = C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: OnTranslator.lnk = C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: Copy to Semagic - C:\Program Files (x86)\Semagic\copy.htm
O8 - Extra context menu item: Semagic - C:\Program Files (x86)\Semagic\link.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDow ... rtScan.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_core.dll,-101 (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Corporation - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\xampp\service.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

--
End of file - 11570 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x2d8
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\xampp\apache\bin\httpd.exe" -k runservice
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files\Microsoft LifeCam\MSCamS64.exe"
C:\xampp\apache\bin\httpd.exe -d C:/xampp/apache
C:\xampp\mysql\bin\mysqld.exe --defaults-file=C:\xampp\mysql\bin\my.ini mysql
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PSIService.exe
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3160
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 9222bd9e-d09b-4682-8069-9bab272a6cff 1
\??\C:\Windows\system32\conhost.exe "18120596521565430234949967061346905278-471388813117111651-1677174972-1772590704
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-6678534391713374187-449432922-8153719661491445233-12512659811814164423-237795133
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe" /h
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5cd83504-9e2d-4cb7-9a31-61938ddff78d -SystemEventPortName:HostProcess-4776709c-dd32-41f3-9b75-b624f705c474 -IoCancelEventPortName:HostProcess-7b5b413d-bc56-414a-9cda-4d1ecd7c63e9 -NonStateChangingEventPortName:HostProcess-0a43d9ee-be31-4899-909b-ab24f11e4c85 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e4810750-176a-4404-bd51-fd7d0c7f43bc -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Trillian\trillian.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
skypekit.exe -p "49711" -f "c:\users\dana\appdata\roaming\trillian\users\dana%2esvedova\skype"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Dana\Documents\XNALara_XPS\XNALara XPS.exe"
"C:\Program Files (x86)\AIMP3\AIMP3.exe"
"C:\Program Files (x86)\PSPad editor\PSPad.exe" "C:\rsit\log.txt"
taskeng.exe {A758B1CF-4243-4646-9CF3-50D0B5F8BD87}
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Dana\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Z nějakýho důvodu se mi to nedaří c&p po tomto řádku, proto posílám zbytek v dalším postu.

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job - C:\Users\Dana\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job - C:\Users\Dana\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\ParetoLogic Registration.job - C:\Windows\system32\rundll32.exe "C:\Program Files (x86)\Common Files\ParetoLogic\UUS2\UUS.dll" RunUns

=========Mozilla firefox=========

ProfilePath - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default

prefs.js - "browser.search.useDBForOrder" - "false"
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\
seoanalysistool@seoworkers
{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
{3c6e1eed-a07e-4c80-9cf3-66ea0bf40b37}
{3d7eb24f-2740-49df-8937-200b1cc08f8a}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-12 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-12 211368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7}]
ChromeFrame BHO - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02 2215240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - ZoneAlarm Security Toolbar - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll [2013-07-22 289168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-05-30 1279480]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-05-30 2352072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe -launchedbylogin []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-01-20 43848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Dana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-28 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2005-02-16 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-16 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-01-20 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [2011-09-16 57928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [2011-10-04 220992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorShield]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdater]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Monitor Apache Servers.lnk]
C:\PROGRA~2\APACHE~1\Apache2.2\bin\APACHE~1.EXE [2012-01-28 41051]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~3\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2014-04-25 137352]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-06-05 2171904]
"LifeCam"=C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
OnTranslator.lnk - C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

C:\Users\Dana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Dana\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.l3codecp"=l3codecp.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"mixer9"=wdmaud.drv
"wave4"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-07-23 23:45:46 ----SHD---- C:\$RECYCLE.BIN
2014-07-23 23:45:39 ----D---- C:\Windows\temp
2014-07-23 23:45:38 ----A---- C:\ComboFix.txt
2014-07-23 23:27:26 ----D---- C:\ComboFix
2014-07-23 14:04:04 ----A---- C:\Windows\zip.exe
2014-07-23 14:04:04 ----A---- C:\Windows\SWSC.exe
2014-07-23 14:04:04 ----A---- C:\Windows\SWREG.exe
2014-07-23 14:04:04 ----A---- C:\Windows\sed.exe
2014-07-23 14:04:04 ----A---- C:\Windows\PEV.exe
2014-07-23 14:04:04 ----A---- C:\Windows\NIRCMD.exe
2014-07-23 14:04:04 ----A---- C:\Windows\MBR.exe
2014-07-23 14:04:04 ----A---- C:\Windows\grep.exe
2014-07-23 14:03:54 ----D---- C:\Qoobox
2014-07-23 11:59:05 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-23 11:42:23 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-07-23 10:51:08 ----D---- C:\FRST
2014-07-23 10:46:17 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-07-23 07:54:24 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 00:03:18 ----D---- C:\ProgramData\Google
2014-07-17 15:02:21 ----D---- C:\Users\Dana\AppData\Roaming\LG Electronics
2014-07-15 18:18:34 ----D---- C:\Program Files (x86)\Microsoft XNA
2014-07-11 14:26:32 ----D---- C:\Program Files (x86)\LG Electronics
2014-07-09 08:33:54 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 08:33:54 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 08:33:54 ----A---- C:\Windows\system32\osk.exe
2014-07-09 08:33:53 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 08:33:53 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 08:33:52 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 08:33:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 08:33:45 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 08:33:45 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 08:33:44 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 08:33:44 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 08:33:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 08:33:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 08:33:36 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 08:33:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 08:33:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 08:33:35 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 08:33:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 08:33:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 08:33:33 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 08:33:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 08:33:33 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 08:33:32 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 08:33:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 08:33:32 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 08:33:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 08:33:31 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 08:33:30 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 08:33:30 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 08:33:29 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 08:33:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 08:33:28 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 08:33:28 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 08:33:28 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 08:33:27 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 08:33:26 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 08:33:26 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 08:33:25 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 08:33:24 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 08:33:24 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 08:32:54 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-09 08:32:53 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 08:32:53 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-08 08:57:19 ----D---- C:\Users\Dana\AppData\Roaming\Dropbox
2014-07-06 14:44:51 ----D---- C:\Users\Dana\AppData\Roaming\Notepad++
2014-07-06 14:44:51 ----D---- C:\Program Files (x86)\Notepad++
2014-06-29 10:08:33 ----D---- C:\Program Files\Inkscape-0.48

======List of files/folders modified in the last 1 month======

2014-07-26 13:50:26 ----D---- C:\Program Files\trend micro
2014-07-26 12:58:54 ----D---- C:\Windows\Prefetch
2014-07-26 12:55:53 ----D---- C:\Users\Dana\AppData\Roaming\.minecraft
2014-07-26 12:04:31 ----RD---- C:\Program Files (x86)
2014-07-26 11:19:46 ----D---- C:\Users\Dana\AppData\Roaming\AIMP3
2014-07-26 11:09:05 ----SHD---- C:\System Volume Information
2014-07-26 09:05:54 ----D---- C:\Users\Dana\AppData\Roaming\OnTranslator
2014-07-26 09:04:52 ----D---- C:\ProgramData\NVIDIA
2014-07-26 08:28:09 ----D---- C:\Windows\system32\config
2014-07-25 17:25:11 ----D---- C:\Windows\Internet Logs
2014-07-25 17:00:20 ----D---- C:\Users\Dana\AppData\Roaming\FileZilla
2014-07-25 07:40:15 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-25 07:40:14 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 23:51:55 ----SHD---- C:\Windows\Installer
2014-07-24 23:47:47 ----D---- C:\Program Files (x86)\Steam
2014-07-24 10:32:22 ----D---- C:\ProgramData
2014-07-24 10:32:20 ----D---- C:\Windows\SysWOW64
2014-07-24 10:32:20 ----D---- C:\Program Files (x86)\Avira
2014-07-24 10:05:07 ----D---- C:\Windows\system32\drivers
2014-07-23 23:46:12 ----D---- C:\Program Files (x86)\Trillian
2014-07-23 23:45:39 ----D---- C:\Windows
2014-07-23 23:41:53 ----A---- C:\Windows\system.ini
2014-07-23 23:37:25 ----D---- C:\Windows\SYSWOW64\drivers
2014-07-23 23:37:25 ----D---- C:\Windows\AppPatch
2014-07-23 23:37:23 ----D---- C:\Program Files (x86)\Common Files
2014-07-23 17:17:30 ----D---- C:\Windows\system32\drivers\etc
2014-07-23 17:17:01 ----D---- C:\Windows\system32\catroot2
2014-07-23 17:13:55 ----D---- C:\Windows\erdnt
2014-07-23 14:14:00 ----D---- C:\ProgramData\Temp
2014-07-23 13:37:40 ----D---- C:\rsit
2014-07-23 11:59:05 ----D---- C:\ProgramData\Malwarebytes
2014-07-23 11:47:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-23 11:45:59 ----D---- C:\AdwCleaner
2014-07-23 08:59:34 ----D---- C:\Windows\system32\NDF
2014-07-23 00:02:02 ----D---- C:\Program Files (x86)\Google
2014-07-22 11:33:07 ----D---- C:\de-zaloha
2014-07-20 13:10:48 ----D---- C:\Program Files (x86)\AIMP3
2014-07-16 16:32:09 ----RSD---- C:\Windows\Fonts
2014-07-15 18:18:59 ----RSD---- C:\Windows\assembly
2014-07-15 17:21:23 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-07-15 17:21:17 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-07-12 17:10:17 ----D---- C:\Users\Dana\AppData\Roaming\Skype
2014-07-11 14:28:48 ----D---- C:\Windows\inf
2014-07-11 14:28:31 ----D---- C:\Windows\system32\catroot
2014-07-11 14:28:30 ----D---- C:\Windows\system32\DriverStore
2014-07-10 12:02:20 ----D---- C:\MCLAN
2014-07-10 09:00:36 ----D---- C:\Windows\winsxs
2014-07-10 00:38:06 ----D---- C:\Program Files\Windows Journal
2014-07-10 00:38:05 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-10 00:38:04 ----D---- C:\Windows\system32\Dism
2014-07-10 00:38:02 ----D---- C:\Windows\System32
2014-07-10 00:38:02 ----D---- C:\Windows\ehome
2014-07-10 00:38:00 ----D---- C:\Windows\system32\en-US
2014-07-10 00:38:00 ----D---- C:\Windows\system32\cs-CZ
2014-07-10 00:38:00 ----D---- C:\Program Files\Internet Explorer
2014-07-10 00:37:58 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-10 00:37:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 12:19:10 ----D---- C:\Windows\system32\MRT
2014-07-09 12:10:45 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 11:32:09 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-07-04 11:31:43 ----D---- C:\Windows\Microsoft.NET
2014-07-04 10:18:54 ----D---- C:\Program Files (x86)\FlashIntegro
2014-07-04 10:17:04 ----D---- C:\Program Files (x86)\Free Video Cutter
2014-07-04 10:11:40 ----D---- C:\Program Files\CCleaner
2014-07-04 09:58:53 ----D---- C:\Program Files (x86)\EA GAMES
2014-07-04 09:45:19 ----D---- C:\Windows\system32\Tasks
2014-07-03 15:37:05 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-07-03 15:05:39 ----SD---- C:\ProgramData\Microsoft
2014-07-03 15:05:35 ----D---- C:\Program Files (x86)\Microsoft Expression
2014-07-03 14:53:10 ----D---- C:\ProgramData\Ubisoft
2014-07-03 14:47:06 ----D---- C:\Program Files (x86)\Lightworks
2014-07-03 14:46:41 ----D---- C:\Program Files\PilotEdit x64
2014-07-03 14:46:40 ----D---- C:\Users\Dana\AppData\Roaming\PilotEdit
2014-07-03 14:46:30 ----D---- C:\Program Files (x86)\eRightSoft
2014-06-30 12:31:43 ----D---- C:\Program Files (x86)\PROFIT
2014-06-29 10:11:36 ----D---- C:\Users\Dana\AppData\Roaming\inkscape
2014-06-29 10:08:33 ----RD---- C:\Program Files
2014-06-28 14:04:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-27 17:46:07 ----D---- C:\Program Files\OBS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-04-06 13368]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2014-04-24 450968]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [2011-09-16 15928]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2011-09-16 72216]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2011-09-16 11552]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 36720]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-05-14 15416]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-30 20256]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf_amd64.sys [2013-07-03 18456]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-06-02 1207808]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys []
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [2013-04-18 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [2013-06-28 36352]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv.sys [2013-11-27 42016]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2013-12-06 35232]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-07-09 52736]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-11-04 146736]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-11-04 117040]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 Apache2.4;Apache2.4; C:\xampp\apache\bin\httpd.exe [2013-02-23 22016]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [2014-06-17 242216]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS64.exe [2010-12-13 194416]
R2 mysql;mysql; C:\xampp\mysql\bin\mysqld.exe [2013-05-16 8151040]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-05-30 1631008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-05-30 21055432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 927520]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-07-15 76888]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2013-07-03 1228504]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2013-07-03 660184]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-20 413128]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2014-04-25 3592120]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-24 116648]
S3 chromoting;@C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_core.dll,-101; C:\Program Files (x86)\Google\Chrome Remote Desktop\36.0.1985.102\remoting_host.exe [2014-06-26 51016]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-23 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2013-03-01 118520]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-07-16 542912]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-29 1255736]
S4 LMIMaint;LogMeIn Maintenance Service; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [2012-09-24 147368]
S4 LogMeIn;LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [2011-09-16 407424]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-07-14 81920]

-----------------EOF-----------------

Jo, je cely, chybela mi cast s registrama a ted uz tam jsou

Akorat nejak nevidim bezet tu Aviru

Napiste mi velikost adresare plochy (c:\users\Dana\Desktop)

Vypnete antivir, at nebrani programu v praci.

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
gupdate
AdobeFlashPlayerUpdateSvc
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Program Files (x86)\Malwarebytes Anti-Malware

:otl
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1602808253-430055931-27258192-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
FF - prefs.js..browser.search.useDBForOrder: "false"
[2014.05.06 19:04:04 | 000,696,321 | ---- | M] () (No name found) -- C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\toolbar@seomoz.org.xpi
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O37 - HKU\S-1-5-21-1602808253-430055931-27258192-1001\...com [@ = ComFile] -- Reg Error: Key error. File not found
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[2012.07.18 16:14:43 | 000,000,464 | ---- | C] () -- C:\Windows\Tasks\ParetoLogic Registration.job
[2012.12.01 11:37:47 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014.02.12 15:26:55 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.02.12 15:26:56 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.02.14 10:21:27 | 000,000,906 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job
[2014.02.14 10:21:28 | 000,000,958 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job
[15 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[15 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\*.tmp -> ]
[5 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorShield] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdater] /64

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Plocha má momentálně 789 MB, musela jsem si stáhnout nějaké pracovní věci a ještě nevytřídila.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Dana
->Temp folder emptied: 10149988 bytes
->Temporary Internet Files folder emptied: 121666803 bytes
->Java cache emptied: 893792 bytes
->FireFox cache emptied: 384841772 bytes
->Google Chrome cache emptied: 6527720 bytes
->Flash cache emptied: 82518 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57311 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 4042246 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 504,00 mb

[EMPTYFLASH]

User: All Users

User: Dana
->Flash cache emptied: 0 bytes

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Program Files (x86)\Malwarebytes Anti-Malware folder moved successfully.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1602808253-430055931-27258192-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Prefs.js: "false" removed from browser.search.useDBForOrder
C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\extensions\toolbar@seomoz.org.xpi moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_USERS\S-1-5-21-1602808253-430055931-27258192-1001_Classes\.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1602808253-430055931-27258192-1001_Classes\ComFile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.com\\|comfile /E : value set successfully!
C:\Windows\SysNative\drivers\~GLH0023.TMP deleted successfully.
C:\Windows\Tasks\ParetoLogic Registration.job moved successfully.
File C:\Windows\Tasks\Adobe Flash Player Updater.job not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001Core.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1602808253-430055931-27258192-1001UA.job moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1DCC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A89.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3757.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP51D7.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5613.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP765C.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9C45.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E03.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAE45.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD129.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD222.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD3C2.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD681.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE560.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2047.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP36B9.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP434D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4F29.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP5FA.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6132.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6351.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP67C7.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP7C50.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPB4A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPC5AC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPD29A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE0C1.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\Installer\MSI97AF.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\$dpx$.tmp\job.xml deleted successfully.
C:\Windows\SoftwareDistribution\Download\4481d0a45b11ae5aa8ea42b0a3ad73c7\$dpx$.tmp folder deleted successfully.
File delete failed. C:\Windows\temp\ZLT0201d.TMP scheduled to be deleted on reboot.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorShield\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdater\ deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 07262014_141416

Files\Folders moved on Reboot...
File move failed. C:\Users\Dana\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a80f_6229ccd76215aea1_0_0.bin scheduled to be moved on reboot.
File move failed. C:\Users\Dana\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a80f_6229ccd76215aea1_0_0.toc scheduled to be moved on reboot.
C:\Users\Dana\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Dana\AppData\Local\Temp\~DFAA3E0D7A3A5C1FB6.TMP moved successfully.
C:\Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\ZLT0201d.TMP not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

ninja_girl píše:Plocha má momentálně 789 MB, musela jsem si stáhnout nějaké pracovní věci a ještě nevytřídila.

OK, ale jinak vite, ze cim mensi, tim lepsi pro chod pc

Jinak doufam, ze je to domaci pocitac, tedy vas osobni a ne nejaky firemni.

Co ten antivir? Podle logu to vypada, ze jste Aviru odinstalovala

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

vyosek píše: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
Stahnete a spustte

Pro potvrzeni volby mackejte A, Enter

Po pouziti utilitu smazte

Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak je na tom pc.

VIRY.CZ

Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač

Re: Trochu zpomalený počítač