VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dannyv at 2013-03-04 17:45:25
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 18 GB (18%) free of 100 GB
Total RAM: 3326 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:46:05, on 4.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files\CheckUpPC\PCCheckUp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
D:\Danny muzika\uTorrent.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Users\Dannyv\AppData\Roaming\BrowserCompanion\tcbhn.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Dannyv\Desktop\RSIT.exe
C:\Program Files\trend micro\Dannyv.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =TB_IESB22
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?src=maxpc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=umail3&s= ... Terms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Ask Toolbar - {6687d232-24bc-4ba0-b7cc-26b878bd4c11} - C:\Program Files\asktoolbar2\asktoolbar2X.dll (file missing)
R3 - URLSearchHook: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll
O2 - BHO: BFlix - {0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E} - C:\Program Files\BFlix\BFlix.dll
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.9\bh\facemoods.dll
O2 - BHO: Click2Save - {66997042-DB2C-AA3C-3D8F-8C21BFE797EA} - C:\ProgramData\Click2Save\506ec633f377a.ocx
O2 - BHO: ToolKit IE Helper - {70EA269E-56DF-49C2-86B2-1A1924ED88B4} - C:\Program Files\ToolKitService\splash.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll
O2 - BHO: Click2Save - {C447B939-5551-0E14-7EC6-11B4B2954854} - C:\ProgramData\Click2Save\506ec65671211.ocx
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: free-downloads.net - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.9\facemoodsTlbr.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ashampoo_US Toolbar - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Google Updater] "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -check_deprecation
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [PC-Checkup] "C:\Program Files\CheckUpPC\PCCheckUp.exe" -mini
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [uTorrent] "D:\Danny muzika\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: tcbhn.lnk = Dannyv\AppData\Roaming\BrowserCompanion\tcbhn.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Danny muzika\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Danny muzika\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{DEA18497-461D-4BEF-8233-F3810C723C12}: NameServer = 192.168.1.1
O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\HRY\Grisoft\AVGFRE~1\avgamsvr.exe (file missing)
O23 - Service: Služba Google Update (gupdate1ca7f0e433cf248) (gupdate1ca7f0e433cf248) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 16985 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003UA.job
C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for pc.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://search.imesh.com/"
prefs.js - "extensions.enabledItems" - "{AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
prefs.js - "keyword.URL" - "http://eu.ask.com/web?l=dis&o=APN10383& ... Y^YY^CZ&q="

"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}"=C:\Program Files\Crawler\firefox\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/Beemp3]
"Description"=ETK Beemp3 Plugin
"Path"=C:\Program Files\ToolKitService\npapi\np-beemp3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/eOffers]
"Description"=ETK eOffers Plugin
"Path"=C:\Program Files\ToolKitService\npapi\np-eoffers.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/FaceBook]
"Description"=ETK Facebook Plugin
"Path"=C:\Program Files\ToolKitService\npapi\np-facebook.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/Radio]
"Description"=ETK Radio Player Plugin
"Path"=C:\Program Files\ToolKitService\npapi\np-radio.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/Settings]
"Description"=ETK Settings Plugin
"Path"=C:\Program Files\ToolKitService\npapi\np-settings.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@etoolkit.com/toolbar]
"Description"=ETK Toolbar
"Path"=C:\Program Files\ToolKitService\npapi\np-toolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=14]
"Description"=Google Updater
"Path"=C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=15.0.1.13]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=15.0.1.13]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13]
"Description"=RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=15.0.1.13]
"Description"=15.0.1.13
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
nppl3260.dll
nprjplug.dll
nprpjplug.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
ask.xml
babylon.xml
esnips.xml
fcmdSrch.xml
google.xml
heureka-cz.xml
iMeshWebSearch.xml
jyxo-cz.xml
Search_Results.xml
seznam-cz.xml
slunecnice-cz.xml
toolkitsearch.xml
wikipedia-cz.xml

C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\
506ec633f35e9@506ec633f3622.com
506ec65671074@506ec656710ad.com
bbrs_002@blabbers.com
ffxtlbr@babylon.com
info@djzig.com
info@thebflix.com
{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
{28387537-e3f9-4ed7-860c-11e69af4a8a0}
{3e0c7f3a-3f50-4730-beb5-4a9a10e2831c}
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}

C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\
ashampoo-us-customized-web-search.xml
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50}]
Browser Companion Helper - C:\Program Files\BrowserCompanion\jsloader.dll [2012-06-28 225584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E}]
BFlix Class - C:\Program Files\BFlix\BFlix.dll [2011-12-30 167936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}]
Ashampoo_US Toolbar - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll [2012-12-30 619928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2010-07-22 1232744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
Wincore Mediabar - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll [2011-10-30 89008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-12-15 425680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]
UrlHelper Class - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll [2011-02-08 721288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files\facemoods.com\facemoods\1.4.17.9\bh\facemoods.dll [2011-04-14 265944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66997042-DB2C-AA3C-3D8F-8C21BFE797EA}]
Click2Save Class - C:\ProgramData\Click2Save\506ec633f377a.ocx [2012-10-05 155136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{70EA269E-56DF-49C2-86B2-1A1924ED88B4}]
ToolKit IE Helper - C:\Program Files\ToolKitService\splash.dll [2011-12-26 109640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-07-30 329520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}]
Browser Companion Helper Verifier - C:\Program Files\BrowserCompanion\updatebhoWin32.dll [2012-06-28 141104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}]
Babylon IE plugin - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll [2012-03-13 288368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-01-09 192144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31 4528760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll [2013-01-09 1000984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}]
Wincore Mediabar - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll [2011-12-27 87480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C447B939-5551-0E14-7EC6-11B4B2954854}]
Click2Save Class - C:\ProgramData\Click2Save\506ec65671211.ocx [2012-10-05 155136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-08-08 1527496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-07-30 59184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-02-01 1499440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2010-07-22 1232744]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-13 3913000]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-05-09 176936]
{28387537-e3f9-4ed7-860c-11e69af4a8a0} - Wincore Mediabar - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll [2011-10-30 89008]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files\facemoods.com\facemoods\1.4.17.9\facemoodsTlbr.dll [2011-04-14 220888]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-02-01 1499440]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352]
{98889811-442D-49dd-99D7-DC866BE87DBC}
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - Wincore Mediabar - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll [2011-12-27 87480]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-08-08 1527496]
{124d001a-bdcb-472f-aa59-bbe7e4bc3204} - Ashampoo_US Toolbar - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll [2012-12-30 619928]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-01-09 192144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-09-11 7739936]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"Google Updater"=C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2011-09-12 161336]
""= []
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-11-16 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files\AMD AVT\bin\kdbsync.exe aml []
"PC-Checkup"=C:\Program Files\CheckUpPC\PCCheckUp.exe [2012-06-15 5366400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-10 218032]
"uTorrent"=D:\Danny muzika\uTorrent.exe [2012-12-11 969104]
"Steam"=C:\Program Files\Steam\steam.exe [2013-02-25 1602984]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4StoryPrePatch]
D:\4Story\PrePatch.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2011-11-12 1647448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Akamai NetSession Interface]
C:\Users\Dannyv\AppData\Local\Akamai\netsession_win.exe [2012-10-09 4441920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files\Ask.com\Updater\Updater.exe [2012-08-08 1644744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe [2012-03-13 3196016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2516296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx]
C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DATAMNGR]
C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE [2011-02-08 1115568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files\Origin\Origin.exe [2013-02-21 3494992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Dannyv\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-21 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods]
C:\Program Files\facemoods.com\facemoods\1.4.17.9\facemoodssrv.exe [2011-04-14 329432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileConnect]
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2009-09-18 2412032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files\Pando Networks\Media Booster\PMB.exe [2011-11-05 3077528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr]
C:\PROGRA~1\Raptr\raptrstub.exe --startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
D:\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-06-02 114992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-12-17 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Real\RealPlayer\update\realsched.exe [2011-12-15 296056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tktray]
C:\Program Files\ToolKitService\tktray.exe [2012-01-23 453712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2012-12-04 773728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\307523~1.318\SSSCHE~1.EXE [2013-02-05 272248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dannyv^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-02-16 384512]

C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
tcbhn.lnk - C:\Users\Dannyv\AppData\Roaming\BrowserCompanion\tcbhn.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"vidc.iv41"=ir41_32.ax
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec.dll
"msacm.vorbis"=vorbis.acm
"VIDC.FPS1"=frapsvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-04 17:38:35 ----D---- C:\rsit
2013-03-04 17:38:35 ----D---- C:\Program Files\trend micro
2013-03-03 17:16:28 ----D---- C:\ATI
2013-03-02 16:05:51 ----D---- C:\Users\Dannyv\AppData\Roaming\Fatshark
2013-03-01 11:08:31 ----D---- C:\Users\Dannyv\AppData\Roaming\JaiboGames
2013-03-01 11:06:54 ----D---- C:\Program Files\Hry.cz
2013-02-28 14:16:20 ----D---- C:\Program Files\CheckUpPC
2013-02-28 13:53:33 ----D---- C:\Windows\pss
2013-02-27 11:32:16 ----D---- C:\Users\Dannyv\AppData\Roaming\Doublefine
2013-02-26 14:24:55 ----A---- C:\Windows\system32\steam_api.dll
2013-02-26 14:21:06 ----D---- C:\Users\Dannyv\AppData\Roaming\dll-files.com
2013-02-26 14:20:39 ----D---- C:\Program Files\Dll-Files.com Fixer
2013-02-24 19:52:56 ----D---- C:\Program Files\Alawarhry.cz
2013-02-23 14:50:11 ----ASH---- C:\pagefile.sys
2013-02-23 09:14:53 ----D---- C:\ProgramData\Razer
2013-02-23 09:14:53 ----D---- C:\Program Files\Razer
2013-02-23 08:51:36 ----D---- C:\ProgramData\ATI
2013-02-23 08:51:29 ----D---- C:\Program Files\AMD AVT
2013-02-23 08:50:59 ----D---- C:\Program Files\AMD APP
2013-02-23 08:36:20 ----D---- C:\AMD
2013-02-23 08:21:31 ----A---- C:\Windows\system32\wups2.dll
2013-02-23 08:21:31 ----A---- C:\Windows\system32\wuauclt.exe
2013-02-23 08:21:30 ----A---- C:\Windows\system32\wucltux.dll
2013-02-23 08:21:30 ----A---- C:\Windows\system32\wuaueng.dll
2013-02-23 08:21:14 ----A---- C:\Windows\system32\wups.dll
2013-02-23 08:21:14 ----A---- C:\Windows\system32\wudriver.dll
2013-02-23 08:21:14 ----A---- C:\Windows\system32\wuapi.dll
2013-02-23 08:20:57 ----A---- C:\Windows\system32\wuwebv.dll
2013-02-23 08:20:57 ----A---- C:\Windows\system32\wuapp.exe
2013-02-21 17:31:35 ----D---- C:\Program Files\Common Files\Skype
2013-02-13 15:18:49 ----A---- C:\Users\Dannyv\AppData\Roaming\technic-launcher.jar
2013-02-13 15:18:47 ----D---- C:\Users\Dannyv\AppData\Roaming\logs
2013-02-13 15:18:47 ----D---- C:\Users\Dannyv\AppData\Roaming\.techniclauncher

======List of files/folders modified in the last 1 month======

2013-03-04 17:45:42 ----D---- C:\Users\Dannyv\AppData\Roaming\uTorrent
2013-03-04 17:45:38 ----D---- C:\Windows\Temp
2013-03-04 17:41:05 ----D---- C:\Users\Dannyv\AppData\Roaming\Skype
2013-03-04 17:38:35 ----RD---- C:\Program Files
2013-03-04 17:36:39 ----SHD---- C:\Windows\Installer
2013-03-04 17:36:38 ----SHD---- C:\Config.Msi
2013-03-04 17:30:25 ----SD---- C:\ProgramData\Microsoft
2013-03-04 17:30:25 ----D---- C:\Program Files\Microsoft
2013-03-04 17:27:46 ----D---- C:\Program Files\CCleaner
2013-03-04 17:26:49 ----D---- C:\Windows\system32\Tasks
2013-03-04 13:43:24 ----D---- C:\Program Files\Steam
2013-03-04 13:43:20 ----D---- C:\Users\Dannyv\AppData\Roaming\BrowserCompanion
2013-03-04 13:43:14 ----D---- C:\Program Files\Common Files\Akamai
2013-03-04 06:53:51 ----SHD---- C:\System Volume Information
2013-03-03 19:31:11 ----A---- C:\Windows\system32\PnkBstrA.exe
2013-03-03 17:17:15 ----D---- C:\Program Files\ATI
2013-03-02 17:59:24 ----D---- C:\Windows\system32\directx
2013-03-02 17:47:42 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-03-02 16:05:29 ----RSD---- C:\Windows\assembly
2013-02-28 13:53:33 ----D---- C:\Windows
2013-02-28 13:07:47 ----D---- C:\ProgramData\Babylon
2013-02-27 17:48:51 ----D---- C:\Windows\System32
2013-02-27 17:48:48 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-02-26 17:00:15 ----D---- C:\ProgramData\AlawarWrapper
2013-02-26 14:21:17 ----D---- C:\Windows\Tasks
2013-02-26 08:15:01 ----D---- C:\Program Files\Common Files\Steam
2013-02-23 15:01:14 ----D---- C:\Windows\system32\config
2013-02-23 14:51:03 ----D---- C:\Windows\winsxs
2013-02-23 14:50:14 ----D---- C:\Windows\system32\cs-CZ
2013-02-23 14:48:27 ----D---- C:\Windows\system32\catroot
2013-02-23 09:14:53 ----HD---- C:\ProgramData
2013-02-23 09:14:52 ----D---- C:\ProgramData\IObit
2013-02-23 08:51:30 ----D---- C:\ProgramData\AMD
2013-02-23 08:50:01 ----D---- C:\Program Files\ATI Technologies
2013-02-23 08:48:05 ----D---- C:\Windows\system32\catroot2
2013-02-23 08:40:43 ----D---- C:\Windows\system32\drivers
2013-02-23 08:40:30 ----D---- C:\Windows\inf
2013-02-23 08:40:18 ----D---- C:\Windows\system32\DriverStore
2013-02-23 08:25:31 ----SD---- C:\Users\Dannyv\AppData\Roaming\Microsoft
2013-02-23 08:18:10 ----D---- C:\ProgramData\Electronic Arts
2013-02-22 07:02:00 ----D---- C:\Program Files\Origin
2013-02-21 17:31:52 ----D---- C:\ProgramData\Skype
2013-02-21 17:31:36 ----RD---- C:\Program Files\Skype
2013-02-21 17:31:35 ----D---- C:\Program Files\Common Files
2013-02-21 16:01:32 ----A---- C:\Windows\system32\PnkBstrB.exe
2013-02-21 15:59:28 ----D---- C:\ProgramData\Orbit
2013-02-21 13:30:19 ----HD---- C:\Program Files\InstallShield Installation Information
2013-02-18 19:09:18 ----D---- C:\ProgramData\CanonIJPLM
2013-02-16 07:57:55 ----D---- C:\Windows\Minidump
2013-02-14 19:52:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-12 06:54:01 ----D---- C:\Windows\Prefetch
2013-02-11 13:50:10 ----D---- C:\Program Files\McAfee Security Scan
2013-02-10 08:41:27 ----D---- C:\Windows\system32\NDF
2013-02-09 13:43:07 ----D---- C:\Users\Dannyv\AppData\Roaming\ERS Game Studios

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 NBVol;Nero Backup Volume Filter Driver; C:\Windows\system32\DRIVERS\NBVol.sys [2011-12-01 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; C:\Windows\system32\DRIVERS\NBVolUp.sys [2011-12-01 12464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-04-14 431672]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 48128]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 296064]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-10-01 281760]
R2 hwpsgt;hwpsgt; C:\Windows\system32\DRIVERS\hwpsgt.sys [2010-01-01 137344]
R2 lemsgt;lemsgt; C:\Windows\system32\DRIVERS\lemsgt.sys [2010-01-01 9472]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-10-01 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-11-16 10070016]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-11-16 290304]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-01 86544]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-09-11 2769120]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 172416]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 78336]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2005-08-10 50688]
S0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2006-02-21 19968]
S0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2005-09-29 66048]
S1 Avg7Core;AVG7 Kernel; C:\Windows\System32\Drivers\avg7core.sys [2010-03-04 667744]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-11-16 10070016]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 39272]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwusbfake;Huawei DataCard USB Fake; C:\Windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ToolkitDisk;ToolkitDisk; \??\C:\Windows\system32\Drivers\toolkitdisk.sys [2011-09-12 57152]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [2012-09-19 10088]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [2012-11-13 14416]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2011-11-10 490840]
R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-11-16 217088]
R2 ezGOSvc;Easybits GO Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-01-31 3289208]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-02-25 543144]
S2 Avg7Alrt;AVG7 Alert Manager Server; C:\HRY\Grisoft\AVGFRE~1\avgamsvr.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1ca7f0e433cf248;Služba Google Update (gupdate1ca7f0e433cf248); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-17 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-26 194032]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-27 251248]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-17 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe []
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2012-07-19 738152]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-01 1343400]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 1435568]
S4 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files\Hi-Rez Studios\HiPatchService.exe [2012-06-26 8704]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
S4 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
S4 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2011-10-08 820568]
S4 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-13 114144]
S4 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2012-07-13 769432]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S4 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [2012-04-06 624856]
S4 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2013-03-03 76888]
S4 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2012-11-02 1699168]
S4 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Zdravim

Odinstalujte Advanced SystemCare 5 a IObit Malware Fighter a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

Stahnete Shortcut Cleaner http://www.bleepingcomputer.com/downloa ... t-cleaner/

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Spustte tradicne dvouklikem
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v miste spusteni jako sc-cleaner.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Search
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

-provedeno ačkoliv od IOB jsem tam mimo toho jednoho už nic neviděl

přikládam log pro délku nejde poslat oba dva bude v druhém příspěvku

Shortcut Cleaner 1.2.1 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
http://www.bleepingcomputer.com/downloa ... t-cleaner/

Program started at: 03/04/2013 06:40:06 PM.

Searching C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\Dannyv\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\Dannyv\Desktop\


0 bad shortcuts found.

Program finished at: 03/04/2013 06:40:08 PM
Execution time: 0 hours(s), 0 minute(s), and 2 seconds(s)

pro delku rodělen !



# AdwCleaner v2.113 - Logfile created 03/04/2013 at 18:41:15
# Updated 23/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)
# User : Dannyv - PC-PC
# Boot Mode : Normal
# Running from : C:\Users\Dannyv\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : ICQ Service

***** [Files / Folders] *****

File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\searchplugins\ask.xml
File Found : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Found : C:\Program Files\Mozilla Firefox\searchplugins\imeshwebsearch.xml
File Found : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
File Found : C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk
File Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\Search_Results.xml
File Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\SweetIm.xml
File Found : C:\Users\pc\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\Askcom.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\Conduit.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\daemon-search.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-1.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-2.xml
File Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-3.xml
Folder Found : C:\Program Files\Ask.com
Folder Found : C:\Program Files\Babylon
Folder Found : C:\Program Files\BrowserCompanion
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\ConduitEngine
Folder Found : C:\Program Files\Crawler
Folder Found : C:\Program Files\facemoods.com
Folder Found : C:\Program Files\free-downloads.net
Folder Found : C:\Program Files\ICQ6Toolbar
Folder Found : C:\Program Files\iMesh Applications\Mediabar
Folder Found : C:\Program Files\Red Sky
Folder Found : C:\Program Files\SweetIM
Folder Found : C:\Program Files\Trymedia
Folder Found : C:\Program Files\uTorrentBar
Folder Found : C:\ProgramData\~0
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\boost_interprocess
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\ProgramData\InstallMate
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownTango
Folder Found : C:\ProgramData\Premium
Folder Found : C:\ProgramData\SweetIM
Folder Found : C:\Users\Dannyv\AppData\Local\APN
Folder Found : C:\Users\Dannyv\AppData\Local\Babylon
Folder Found : C:\Users\Dannyv\AppData\Local\Conduit
Folder Found : C:\Users\Dannyv\AppData\Local\DownTango
Folder Found : C:\Users\Dannyv\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Dannyv\AppData\LocalLow\BabylonToolbar
Folder Found : C:\Users\Dannyv\AppData\LocalLow\bbrs_002.tb
Folder Found : C:\Users\Dannyv\AppData\LocalLow\Conduit
Folder Found : C:\Users\Dannyv\AppData\LocalLow\ConduitEngine
Folder Found : C:\Users\Dannyv\AppData\LocalLow\CT2481032
Folder Found : C:\Users\Dannyv\AppData\LocalLow\facemoods.com
Folder Found : C:\Users\Dannyv\AppData\LocalLow\free-downloads.net
Folder Found : C:\Users\Dannyv\AppData\LocalLow\imeshbandmltbpi
Folder Found : C:\Users\Dannyv\AppData\LocalLow\mediabarim
Folder Found : C:\Users\Dannyv\AppData\LocalLow\PriceGong
Folder Found : C:\Users\Dannyv\AppData\LocalLow\uTorrentBar
Folder Found : C:\Users\Dannyv\AppData\Roaming\Ask.com
Folder Found : C:\Users\Dannyv\AppData\Roaming\Babylon
Folder Found : C:\Users\Dannyv\AppData\Roaming\BabylonToolbar
Folder Found : C:\Users\Dannyv\AppData\Roaming\BrowserCompanion
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\CT2481032
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\bbrs_002@blabbers.com
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\ffxtlbr@babylon.com
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\mediabarim
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\Smartbar
Folder Found : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\SweetIMToolbarData
Folder Found : C:\Users\Dannyv\AppData\Roaming\OpenCandy
Folder Found : C:\Users\pc\AppData\Local\AskToolbar
Folder Found : C:\Users\pc\AppData\Local\Babylon
Folder Found : C:\Users\pc\AppData\Local\Temp\AskSearch
Folder Found : C:\Users\pc\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\pc\AppData\LocalLow\Conduit
Folder Found : C:\Users\pc\AppData\LocalLow\ConduitEngine
Folder Found : C:\Users\pc\AppData\LocalLow\facemoods.com
Folder Found : C:\Users\pc\AppData\LocalLow\free-downloads.net
Folder Found : C:\Users\pc\AppData\LocalLow\imeshbandmltbpi
Folder Found : C:\Users\pc\AppData\LocalLow\mediabarim
Folder Found : C:\Users\pc\AppData\LocalLow\PriceGong
Folder Found : C:\Users\pc\AppData\LocalLow\uTorrentBar
Folder Found : C:\Users\pc\AppData\Roaming\Babylon
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\Conduit
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\ConduitEngine
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\CT1098640
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\CT2786678
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\DTToolbar@toolbarnet.com
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\engine@conduit.com
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\ffxtlbr@Facemoods.com
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\toolbar@ask.com
Folder Found : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\mediabarim
Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Folder Found : C:\Windows\Installer\{A1194237-547A-461d-BD44-B97B1574A7DA}

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll
Data Found : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\AppDataLow\AskToolbarInfo
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\free-downloads.net
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\uTorrentBar
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Babylon
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\BFlix
Key Found : HKCU\Software\Blabbers
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\CToolbar
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\DownTango
Key Found : HKCU\Software\facemoods.com
Key Found : HKCU\Software\Microsoft\Babylon
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\Software\BabylonToolbar
Key Found : HKLM\Software\BFlix
Key Found : HKLM\Software\BrowserCompanion
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Key Found : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Found : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Found : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Key Found : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Found : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Found : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Key Found : HKLM\SOFTWARE\Classes\BabyDict
Key Found : HKLM\SOFTWARE\Classes\BabyGloss
Key Found : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Key Found : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Key Found : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Key Found : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Key Found : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Key Found : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Key Found : HKLM\SOFTWARE\Classes\BabyOptFile
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{183643C8-EE67-4574-9A38-927852E34163}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1DDA201E-5B42-4352-933E-21A92B297E3B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2656B92B-0207-4AFB-BEBF-F5FD231ECD39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4D25FB7A-8902-4291-960E-9ADA051CFBBF}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{54ECA872-DB2A-4C6B-BBB2-F3777C6786CC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{59570C1F-B692-48C9-91B4-7809E6945287}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{63A0F7FA-2C95-4D7E-AF25-EFCC303D20A1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6559E502-6EE1-46B8-A83C-F3A45BDA23EE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C63CA8A4-AB4E-49E5-A6C0-33FC86D80205}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C6A7847E-8931-4A9A-B4EF-72A91E3CCF4D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DD0F1D24-E250-4E93-966C-65615720AEFB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EC1277BB-1C71-4C0D-BA6D-BFEA16E773A6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\ctbr.R404Pro
Key Found : HKLM\SOFTWARE\Classes\CToolbar.TB4Client
Key Found : HKLM\SOFTWARE\Classes\CToolbar.TB4Script
Key Found : HKLM\SOFTWARE\Classes\CToolbar.TB4Server
Key Found : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Key Found : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
Key Found : HKLM\SOFTWARE\Classes\facemoods.dskBnd
Key Found : HKLM\SOFTWARE\Classes\facemoods.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Found : HKLM\SOFTWARE\Classes\facemoods.xtrnl
Key Found : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1
Key Found : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
Key Found : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Found : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Key Found : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
Key Found : HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Key Found : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Key Found : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\tbr
Key Found : HKLM\SOFTWARE\Classes\sim-packages
Key Found : HKLM\SOFTWARE\Classes\SmartBar.CT2481032
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Found : HKLM\SOFTWARE\Classes\tdataprotocol.CTData
Key Found : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT1098640
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{0C2E529C-A82C-4AC6-8807-0B51F7AD7BB2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{506F578A-91E1-46CE-830F-E2F4268E9966}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{63BEF061-5EFC-4753-9806-ED0573BC7C4B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E79BB61D-7F1A-41DF-8AD0-402795E3B566}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}
Key Found : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Key Found : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Key Found : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Key Found : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\conduitEngine
Key Found : HKLM\Software\conduitEngine
Key Found : HKLM\Software\CToolbar
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\DownTango
Key Found : HKLM\Software\facemoods.com
Key Found : HKLM\Software\free-downloads.net
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{181BFF26-FB11-4415-9BA8-C911A440F20D}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F73C1CD-2413-4212-B4BE-F11301DBA52C}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7459F1D0-9FB6-4D71-AA7B-9DECB34EB704}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEBB801F-11B1-436D-A513-EEF243E53349}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE0DD909-5BD5-47FF-B2E1-A890276381E3}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Babylon Client
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\facemoods
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Babylon.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DA5BD2D3CA2D6943A1A233CD3F88CE7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC9EFC5C3366B4DB850DAB49330C52
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E98451C7CA808F47AFE467BDABD02FA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD11FD45FC7B9E46A8F4B69F3A66E35
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5979AD63CA2D6943A1A233CD3F88CE7
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF9BD2952384A9C49B4A5D3D95329890
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABA2A33488410A4AA40489BD2224282
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{16726771-C380-4280-BAF9-1223B3838786}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A1194237-547A-461d-BD44-B97B1574A7DA}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Babylon
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BFlix
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CToolbar_UNINSTALL
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DownTango
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\free-downloads.net Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wincore MediaBar
Key Found : HKLM\Software\uTorrentBar
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Key Found : HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{28387537-E3F9-4ED7-860C-11E69AF4A8A0}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{ECDEE021-0D17-467F-A1FF-C7A115230949}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{ECDEE021-0D17-467F-A1FF-C7A115230949}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2481032&SSPV=TB_IESB22
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=umail3&s={searchTerms}&f=4

-\\ Mozilla Firefox v15.0.1 (cs)

File : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\prefs.js

Found : user_pref("CT1098640..clientLogIsEnabled", false);
Found : user_pref("CT1098640..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT1098640..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT1098640.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT1098640.CTID", "CT1098640");
Found : user_pref("CT1098640.CommunitiesChangesLastCheckTime", "Sun Mar 06 2011 17:27:48 GMT+0100");
Found : user_pref("CT1098640.CommunityChanged", true);
Found : user_pref("CT1098640.CurrentServerDate", "6-3-2011");
Found : user_pref("CT1098640.DialogsAlignMode", "LTR");
Found : user_pref("CT1098640.DownloadDomainsCheckInterval", "168");
Found : user_pref("CT1098640.DownloadDomainsListLastCheckTime", "Tue Mar 01 2011 18:13:48 GMT+0100");
Found : user_pref("CT1098640.DownloadDomainsListLastServerUpdateTime", "1201073583");
Found : user_pref("CT1098640.DownloadReferralCookieData", "");
Found : user_pref("CT1098640.FeedLastCount128295885701037994", 0);
Found : user_pref("CT1098640.FeedPollDate128295885701037994", "Sun Mar 06 2011 16:59:20 GMT+0100");
Found : user_pref("CT1098640.FirstServerDate", "10-1-2011");
Found : user_pref("CT1098640.FirstTime", true);
Found : user_pref("CT1098640.FirstTimeFF3", true);
Found : user_pref("CT1098640.FixPageNotFoundErrors", true);
Found : user_pref("CT1098640.GroupingServerCheckInterval", 1440);
Found : user_pref("CT1098640.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT1098640.HasUserGlobalKeys", true);
Found : user_pref("CT1098640.Initialize", true);
Found : user_pref("CT1098640.InitializeCommonPrefs", true);
Found : user_pref("CT1098640.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT1098640.InstalledDate", "Mon Jan 10 2011 09:55:16 GMT+0100");
Found : user_pref("CT1098640.InvalidateCache", false);
Found : user_pref("CT1098640.IsGrouping", false);
Found : user_pref("CT1098640.IsMulticommunity", true);
Found : user_pref("CT1098640.IsOpenThankYouPage", false);
Found : user_pref("CT1098640.IsOpenUninstallPage", true);
Found : user_pref("CT1098640.LanguagePackLastCheckTime", "Sun Mar 06 2011 08:50:28 GMT+0100");
Found : user_pref("CT1098640.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT1098640.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT1098640.LastLogin_3.2.5.2", "Sun Mar 06 2011 14:57:12 GMT+0100");
Found : user_pref("CT1098640.LatestVersion", "3.2.5.2");
Found : user_pref("CT1098640.Locale", "en-us");
Found : user_pref("CT1098640.MCDetectTooltipHeight", "83");
Found : user_pref("CT1098640.MCDetectTooltipShow", true);
Found : user_pref("CT1098640.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT1098640.MCDetectTooltipWidth", "295");
Found : user_pref("CT1098640.RadioIsPodcast", false);
Found : user_pref("CT1098640.RadioLastCheckTime", "Sun Mar 06 2011 08:50:30 GMT+0100");
Found : user_pref("CT1098640.RadioLastUpdateIPServer", "0");
Found : user_pref("CT1098640.RadioLastUpdateServer", "128929877726170000");
Found : user_pref("CT1098640.RadioMediaID", "4817804");
Found : user_pref("CT1098640.RadioMediaType", "Media Player");
Found : user_pref("CT1098640.RadioMenuSelectedID", "EBRadioMenu_CT10986404817804");
Found : user_pref("CT1098640.RadioStationName", "Adult%20Alternative");
Found : user_pref("CT1098640.RadioStationURL", "hxxp://syndication.choiceradio.com/asxplay/asx-music/406.asx[...]
Found : user_pref("CT1098640.SHRINK_TOOLBAR", 1);
Found : user_pref("CT1098640.SavedHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CT1098640.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Found : user_pref("CT1098640.SearchFromAddressBarIsInit", true);
Found : user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109[...]
Found : user_pref("CT1098640.SearchInNewTabEnabled", true);
Found : user_pref("CT1098640.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT1098640.SearchInNewTabLastCheckTime", "Sun Mar 06 2011 08:50:27 GMT+0100");
Found : user_pref("CT1098640.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT1098640.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT1098640.ServiceMapLastCheckTime", "Sun Mar 06 2011 08:50:27 GMT+0100");
Found : user_pref("CT1098640.SettingsLastCheckTime", "Sun Mar 06 2011 16:59:20 GMT+0100");
Found : user_pref("CT1098640.SettingsLastUpdate", "1297856523");
Found : user_pref("CT1098640.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT1098640.ThirdPartyComponentsLastCheck", "Mon Feb 21 2011 15:27:54 GMT+0100");
Found : user_pref("CT1098640.ThirdPartyComponentsLastUpdate", "1246790578");
Found : user_pref("CT1098640.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Found : user_pref("CT1098640.UserID", "UN70593685331222293");
Found : user_pref("CT1098640.ValidationData_Toolbar", 2);
Found : user_pref("CT1098640.WeatherNetwork", "");
Found : user_pref("CT1098640.WeatherPollDate", "Sun Mar 06 2011 17:27:50 GMT+0100");
Found : user_pref("CT1098640.WeatherUnit", "C");
Found : user_pref("CT1098640.myStuffEnabled", true);
Found : user_pref("CT1098640.myStuffPublihserMinWidth", 400);
Found : user_pref("CT1098640.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT1098640.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT1098640.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT1098640.testingCtid", "");
Found : user_pref("CT1098640.toolbarAppMetaDataLastCheckTime", "Sun Mar 06 2011 08:50:28 GMT+0100");
Found : user_pref("CT1098640.toolbarContextMenuLastCheckTime", "Mon Jan 10 2011 09:55:18 GMT+0100");
Found : user_pref("CT1098640.usagesFlag", 2);
Found : user_pref("CT2786678..clientLogIsEnabled", false);
Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2786678.CTID", "CT2786678");
Found : user_pref("CT2786678.CurrentServerDate", "6-3-2011");
Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
Found : user_pref("CT2786678.DownloadReferralCookieData", "");
Found : user_pref("CT2786678.EMailNotifierPollDate", "Sun Mar 06 2011 17:27:48 GMT+0100");
Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 550);
Found : user_pref("CT2786678.FeedPollDate129301619375443753", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375443759", "Sun Mar 06 2011 16:56:09 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444699", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444705", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444711", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444717", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444723", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444729", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444735", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444741", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedPollDate129301619375444747", "Sun Mar 06 2011 16:56:08 GMT+0100");
Found : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Found : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Found : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Found : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Found : user_pref("CT2786678.FirstServerDate", "4-12-2010");
Found : user_pref("CT2786678.FirstTime", true);
Found : user_pref("CT2786678.FirstTimeFF3", true);
Found : user_pref("CT2786678.FixPageNotFoundErrors", false);
Found : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2786678.HasUserGlobalKeys", true);
Found : user_pref("CT2786678.Initialize", true);
Found : user_pref("CT2786678.InitializeCommonPrefs", true);
Found : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Found : user_pref("CT2786678.InstalledDate", "Sat Dec 04 2010 15:26:17 GMT+0100");
Found : user_pref("CT2786678.IsGrouping", false);
Found : user_pref("CT2786678.IsMulticommunity", false);
Found : user_pref("CT2786678.IsOpenThankYouPage", true);
Found : user_pref("CT2786678.IsOpenUninstallPage", false);
Found : user_pref("CT2786678.LanguagePackLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Found : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2786678.LastLogin_3.2.3.3", "Tue Dec 14 2010 11:44:16 GMT+0100");
Found : user_pref("CT2786678.LastLogin_3.2.5.2", "Sun Mar 06 2011 14:57:11 GMT+0100");
Found : user_pref("CT2786678.LatestVersion", "3.2.5.2");
Found : user_pref("CT2786678.Locale", "en");
Found : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Found : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Found : user_pref("CT2786678.SavedHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CT2786678.SearchBoxWidth", 150);
Found : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Found : user_pref("CT2786678.SearchInNewTabEnabled", true);
Found : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sun Mar 06 2011 08:50:23 GMT+0100");
Found : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2786678.ServiceMapLastCheckTime", "Sun Mar 06 2011 08:50:23 GMT+0100");
Found : user_pref("CT2786678.SettingsLastCheckTime", "Sun Mar 06 2011 16:59:20 GMT+0100");
Found : user_pref("CT2786678.SettingsLastUpdate", "1297859874");
Found : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sun Feb 27 2011 10:28:55 GMT+0100");
Found : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Found : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Found : user_pref("CT2786678.UserID", "UN72635374538588550");
Found : user_pref("CT2786678.ValidationData_Toolbar", 2);
Found : user_pref("CT2786678.WeatherNetwork", "");
Found : user_pref("CT2786678.WeatherPollDate", "Sun Mar 06 2011 17:27:50 GMT+0100");
Found : user_pref("CT2786678.WeatherUnit", "C");
Found : user_pref("CT2786678.alertChannelId", "1178763");
Found : user_pref("CT2786678.myStuffEnabled", true);
Found : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2786678.testingCtid", "");
Found : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Found : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sat Dec 04 2010 15:26:18 GMT+0100");
Found : user_pref("CT2786678.usagesFlag", 2);
Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT1098640");
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/5747/5719/CZ", "\"0\"");
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1098640", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1098640/CT1098640[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/equalizer_de[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/minimize.gif[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/play.gif", "[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/stop.gif", "[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/vol.gif", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
Found : user_pref("CommunityToolbar.EngineOwner", "CT2786678");
Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar");
Found : user_pref("CommunityToolbar.IsEngineShown", true);
Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "CT2786678,ConduitEngine,CT1098640");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,ConduitEngine,CT1098640");
Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Apr 10 2011 15:57:27 GMT+02[...]
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 21 2011 07:26:06 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 18:54:01 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "acdffa31-ab99-4dc3-964f-c7e4ec637643");
Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1098640");
Found : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jun 15 2011 06:10:23 GMT+0200");
Found : user_pref("ConduitEngine.CTID", "ConduitEngine");
Found : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Jun 20 2011 14:30:31 GMT+0200");
Found : user_pref("ConduitEngine.FirstServerDate", "12/04/2010 17");
Found : user_pref("ConduitEngine.FirstTime", true);
Found : user_pref("ConduitEngine.FirstTimeFF3", true);
Found : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Found : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Found : user_pref("ConduitEngine.Initialize", true);
Found : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Found : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Found : user_pref("ConduitEngine.InstalledDate", "Sat Dec 04 2010 15:26:17 GMT+0100");
Found : user_pref("ConduitEngine.IsMulticommunity", false);
Found : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Found : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Found : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Tue Jun 21 2011 18:54:02 GMT+0200");
Found : user_pref("ConduitEngine.LastLogin_3.2.3.3", "Tue Dec 14 2010 11:44:18 GMT+0100");
Found : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 06 2011 16:56:10 GMT+0100");
Found : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Wed Jun 22 2011 06:11:09 GMT+0200");
Found : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Found : user_pref("ConduitEngine.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13"[...]
Found : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Found : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Found : user_pref("ConduitEngine.SettingsLastCheckTime", "Wed Jun 22 2011 06:11:09 GMT+0200");
Found : user_pref("ConduitEngine.UserID", "UN30372651583668432");
Found : user_pref("ConduitEngine.engineLocale", "cs");
Found : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Tue Jun 21 2011 18:54:02 GMT+0200");
Found : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Wed Jun 22 2011 06:11:09 GMT+0200");
Found : user_pref("ConduitEngine.initDone", true);
Found : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Found : user_pref("ConduitEngine.usagesFlag", 2);
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultthis.engineName", "free-downloads.net Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&Sea[...]
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("browser.search.selectedEngineInDialog", "Web Search (eToolKit)");
Found : user_pref("extensions.asktb.cbid", "H3");
Found : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={qsrc}&o={o}&l={l[...]
Found : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.imesh.com/web?src=ffb&systemid=[...]
Found : user_pref("extensions.asktb.fresh-install", false);
Found : user_pref("extensions.asktb.l", "dis");
Found : user_pref("extensions.asktb.last-config-req", "1313503370832");
Found : user_pref("extensions.asktb.locale", "en_EU");
Found : user_pref("extensions.asktb.o", "15851");
Found : user_pref("extensions.asktb.options-lang", "en");
Found : user_pref("extensions.asktb.options-locale", "UK");
Found : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Found : user_pref("extensions.asktb.qsrc", "2871");
Found : user_pref("extensions.asktb.r", "7");
Found : user_pref("extensions.asktb.search-history-queries", "www.zop.cz");
Found : user_pref("extensions.asktb.search-suggestions-enabled", true);
Found : user_pref("extensions.asktb.v", "3.9.1.100006");
Found : user_pref("extensions.enabledAddons", "ffxtlbr@Facemoods.com:1.3.0,{c2d64ff7-0ab8-4263-89c9-ea3b0f8f[...]
Found : user_pref("extensions.facemoods.aflt", "_#umail3");
Found : user_pref("extensions.facemoods.firstRun", false);
Found : user_pref("extensions.facemoods.lastActv", "11");
Found : user_pref("icqtoolbar.allowSendURL", false);
Found : user_pref("icqtoolbar.engineVerified", true);
Found : user_pref("icqtoolbar.geolastmodified", 1334127509);
Found : user_pref("icqtoolbar.hiddenElements", "itb_options");
Found : user_pref("icqtoolbar.history", "knihovna%20m%C4%9Bsta%20plzn%C4%9B||guitar%20hero%20aerosmith%20dow[...]
Found : user_pref("icqtoolbar.icqgeo", 42);
Found : user_pref("icqtoolbar.installTime", "1334131187");
Found : user_pref("icqtoolbar.installsource", "1");
Found : user_pref("icqtoolbar.itbsitescount", 0);
Found : user_pref("icqtoolbar.newtab_state", "1");
Found : user_pref("icqtoolbar.numberOfSearches", 1);
Found : user_pref("icqtoolbar.previousFFVersion", "11.0");
Found : user_pref("icqtoolbar.removedsitescount", 4);
Found : user_pref("icqtoolbar.skip_default_search", "no");
Found : user_pref("icqtoolbar.suggestions", false);
Found : user_pref("icqtoolbar.uniqueID", "128742101012874209861287496942175");
Found : user_pref("icqtoolbar.usageStatstTimestamp", 1334127528);
Found : user_pref("icqtoolbar.version", "2.0.1.6");
Found : user_pref("icqtoolbar.voucherHideClicks", 0);
Found : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Found : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Found : user_pref("icqtoolbar.voucherWasShown", 0);
Found : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Found : user_pref("icqtoolbar.xmlLanguage", "cs");
Found : user_pref("keyword.URL", "hxxp://search.imesh.com/web?src=ffb&systemid=1&q=");

File : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\prefs.js

Found : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Found : user_pref("CT2481032.1000082.isPlayDisplay", "true");
Found : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Found : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT2481032.FirstTime", "true");
Found : user_pref("CT2481032.FirstTimeFF3", "true");
Found : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Found : user_pref("CT2481032.PG_ENABLE", "dHJ1ZQ==");
Found : user_pref("CT2481032.RevertSettingsEnabled", true);
Found : user_pref("CT2481032.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT248[...]
Found : user_pref("CT2481032.UserID", "UN67161718284188254");
Found : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT2481032.autoDisableScopes", -1);
Found : user_pref("CT2481032.browser.search.defaultthis.engineName", true);
Found : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Found : user_pref("CT2481032.cbfirsttime.enc", "VHVlIEphbiAwMSAyMDEzIDE4OjU1OjI2IEdNVCswMTAw");
Found : user_pref("CT2481032.defaultSearch", "true");
Found : user_pref("CT2481032.embeddedsData", "[{\"appId\":\"129058858240125318\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT2481032.enableAlerts", "false");
Found : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Found : user_pref("CT2481032.enableSearchFromAddressBar", "true");
Found : user_pref("CT2481032.firstTimeDialogOpened", "true");
Found : user_pref("CT2481032.fixPageNotFoundError", "true");
Found : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT2481032.fixUrls", true);
Found : user_pref("CT2481032.installId", "conduitnsisintegration");
Found : user_pref("CT2481032.installType", "conduitnsisintegration");
Found : user_pref("CT2481032.isCheckedStartAsHidden", true);
Found : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT2481032.isNewTabEnabled", true);
Found : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Found : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT2481032.keyword", true);
Found : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT2481032.lastVersion", "10.14.42.7");
Found : user_pref("CT2481032.migrateAppsAndComponents", true);
Found : user_pref("CT2481032.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Found : user_pref("CT2481032.openThankYouPage", "false");
Found : user_pref("CT2481032.openUninstallPage", "false");
Found : user_pref("CT2481032.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Found : user_pref("CT2481032.price-gong.isManagedApp", "true");
Found : user_pref("CT2481032.revertSettingsEnabled", "false");
Found : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Found : user_pref("CT2481032.search.searchCount", "0");
Found : user_pref("CT2481032.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnet_lastUpdate", "1359984234964");
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnnbrk_lastUpdate", "1359984234903");
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-computeractive_lastUpdate", "13599842349[...]
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-dailymirror_lastUpdate", "1359984235280"[...]
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-google_lastUpdate", "1359984235092");
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-techcrunch_lastUpdate", "1359984235028")[...]
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-thesun_news_lastUpdate", "1359984234933"[...]
Found : user_pref("CT2481032.serviceLayer_services_app.twitter.user-wired_lastUpdate", "1359984235246");
Found : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1359231568275");
Found : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1359984223422");
Found : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1359231568013");
Found : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359984223803");
Found : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1359231568347");
Found : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1359984223928");
Found : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1359984223323");
Found : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1359231567633");
Found : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1359984223577");
Found : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1359984223706");
Found : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Found : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1362414174604");
Found : user_pref("CT2481032.settingsINI", true);
Found : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Found : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Found : user_pref("CT2481032.smartbar.Uninstall", "0");
Found : user_pref("CT2481032.smartbar.homepage", true);
Found : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Found : user_pref("CT2481032.toolbarBornServerTime", "1-1-2013");
Found : user_pref("CT2481032.toolbarCurrentServerTime", "4-2-2013");
Found : user_pref("CT2481032.url_history0001.enc", "aHR0cDovL3d3dy5ub3Zpbmt5LmN6L2hvcm9za29wLzo6OmNsaWNraGFu[...]
Found : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=1[...]
Found : user_pref("Smartbar.ConduitSearchEngineList", "Ashampoo US Customized Web Search");
Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481032[...]
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&q[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT2481032");
Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Found : user_pref("browser.babylon.HPOnNewTab,s", "s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s[...]
Found : user_pref("browser.newtab.url", "hxxp://www.claro-search.com/?affID=115779&tt=4 ... c=NT_ss&mn[...]
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultenginename,S", "Search the web (Babylon)");
Found : user_pref("browser.search.order.1,S", "Search the web (Babylon)");
Found : user_pref("browser.search.selectedEngine", "Ashampoo US Customized Web Search");
Found : user_pref("browser.search.selectedEngine,S", "Search the web (Babylon)");
Found : user_pref("browser.startup.homepage", "hxxp://search.imesh.com/");
Found : user_pref("extensions.506ec633f3695.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Found : user_pref("extensions.506ec65671121.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Found : user_pref("extensions.BabylonToolbar.admin", false);
Found : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Found : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Found : user_pref("extensions.BabylonToolbar.excTlbr", false);
Found : user_pref("extensions.BabylonToolbar.id", "605035b100000000000000ff2906f01a");
Found : user_pref("extensions.BabylonToolbar.instlDay", "15549");
Found : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Found : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Found : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Found : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Found : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Found : user_pref("extensions.BabylonToolbar.vrsn", "1.5.29.1");
Found : user_pref("extensions.BabylonToolbar.vrsni", "1.5.29.1");
Found : user_pref("extensions.BabylonToolbar_i.aflt", "babclient");
Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112060&tt=3012_7");
Found : user_pref("extensions.BabylonToolbar_i.hardId", "605035b100000000000000ffb85175cc");
Found : user_pref("extensions.BabylonToolbar_i.id", "605035b100000000000000ffb85175cc");
Found : user_pref("extensions.BabylonToolbar_i.instlDay", "15446");
Found : user_pref("extensions.BabylonToolbar_i.instlRef", "std");
Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.claro-search.com/?affID=115779&tt=451[...]
Found : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Found : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Found : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Found : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.29.111:28:34");
Found : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Found : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.imesh.com/web?src=ffb&systemid=[...]
Found : user_pref("extensions.efwbjkbewre83sfr3.scode", "(function(){try{if('aol.com,mail.google.com,mystart[...]
Found : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.2.0,{28387537-e3f9-4ed7-860c-11e69af4a8[...]
Found : user_pref("keyword.URL", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&qsrc=2869&apn_dtid=^YYYYYY^[...]
Found : user_pref("keyword.URL,h", "hxxp://search.babylon.com/?babsrc=KW_def&affID=109170&q=");
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=13[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.originalHomepage", "hxxp://search.imesh.com/");
Found : user_pref("smartbar.originalSearchAddressUrl", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&qsrc=[...]
Found : user_pref("smartbar.originalSearchEngine", "Ask.com");
Found : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Found : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.mode.debug", "false");
Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Found : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.imesh.com/");
Found : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.imesh.com/web?src=ffb&systemid=1&q=[...]
Found : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Found : user_pref("sweetim.toolbar.search.history", "Ucitel%20hrani%20na");
Found : user_pref("sweetim.toolbar.search.history.capacity", "10");
Found : user_pref("sweetim.toolbar.searchguard.enable", "true");
Found : user_pref("sweetim.toolbar.simapp_id", "{4FA92ED5-C89B-11E0-A9BA-00241DC5191D}");
Found : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?barid={4FA92ED5-C89B-11E0-A9BA-[...]

-\\ Google Chrome v25.0.1364.97

File : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.25] : icon_url = "hxxp://facemoods.com/favicon.ico",
Found [l.28] : keyword = "facemoods.com",
Found [l.31] : search_url = "hxxp://start.facemoods.com/?a=umail3&s={searchTerms}&f=4",

File : C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.3027] : urls_to_restore_on_startup = [ "hxxp://www.claro-search.com/?affID=115779&tt=4 ... ff2906f01a" ]

*************************

AdwCleaner[R1].txt - [97697 octets] - [04/03/2013 18:41:15]

########## EOF - C:\AdwCleaner[R1].txt - [97758 octets] ##########

Zaliskane jak jetel

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Delete
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

# AdwCleaner v2.113 - Logfile created 03/04/2013 at 18:51:33
# Updated 23/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)
# User : Dannyv - PC-PC
# Boot Mode : Normal
# Running from : C:\Users\Dannyv\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : ICQ Service

***** [Files / Folders] *****

File Deleted : C:\END
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\ask.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\imeshwebsearch.xml
File Deleted : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tcbhn.lnk
File Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\Search_Results.xml
File Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\SweetIm.xml
File Deleted : C:\Users\pc\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\Askcom.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\Conduit.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\daemon-search.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\searchplugins\icqplugin-3.xml
Folder Deleted : C:\Program Files\Ask.com
Folder Deleted : C:\Program Files\Babylon
Folder Deleted : C:\Program Files\BrowserCompanion
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\ConduitEngine
Folder Deleted : C:\Program Files\Crawler
Folder Deleted : C:\Program Files\facemoods.com
Folder Deleted : C:\Program Files\free-downloads.net
Folder Deleted : C:\Program Files\ICQ6Toolbar
Folder Deleted : C:\Program Files\iMesh Applications\Mediabar
Folder Deleted : C:\Program Files\Red Sky
Folder Deleted : C:\Program Files\SweetIM
Folder Deleted : C:\Program Files\Trymedia
Folder Deleted : C:\Program Files\uTorrentBar
Folder Deleted : C:\ProgramData\~0
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownTango
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\ProgramData\SweetIM
Folder Deleted : C:\Users\Dannyv\AppData\Local\APN
Folder Deleted : C:\Users\Dannyv\AppData\Local\Babylon
Folder Deleted : C:\Users\Dannyv\AppData\Local\Conduit
Folder Deleted : C:\Users\Dannyv\AppData\Local\DownTango
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\bbrs_002.tb
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\CT2481032
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\free-downloads.net
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\imeshbandmltbpi
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\mediabarim
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Dannyv\AppData\LocalLow\uTorrentBar
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Ask.com
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\BabylonToolbar
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\BrowserCompanion
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\CT2481032
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\bbrs_002@blabbers.com
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\mediabarim
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\Smartbar
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\SweetIMToolbarData
Folder Deleted : C:\Users\Dannyv\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\pc\AppData\Local\AskToolbar
Folder Deleted : C:\Users\pc\AppData\Local\Babylon
Folder Deleted : C:\Users\pc\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\pc\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\pc\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\pc\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\pc\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\pc\AppData\LocalLow\free-downloads.net
Folder Deleted : C:\Users\pc\AppData\LocalLow\imeshbandmltbpi
Folder Deleted : C:\Users\pc\AppData\LocalLow\mediabarim
Folder Deleted : C:\Users\pc\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\pc\AppData\LocalLow\uTorrentBar
Folder Deleted : C:\Users\pc\AppData\Roaming\Babylon
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\Conduit
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\ConduitEngine
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\CT1098640
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\CT2786678
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\DTToolbar@toolbarnet.com
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\engine@conduit.com
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\ffxtlbr@Facemoods.com
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\extensions\toolbar@ask.com
Folder Deleted : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\mediabarim
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Folder Deleted : C:\Windows\Installer\{A1194237-547A-461d-BD44-B97B1574A7DA}

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\APN DTX
Key Deleted : HKCU\Software\AppDataLow\AskToolbarInfo
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\free-downloads.net
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentBar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\Babylon
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BFlix
Key Deleted : HKCU\Software\Blabbers
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\CToolbar
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\DownTango
Key Deleted : HKCU\Software\facemoods.com
Key Deleted : HKCU\Software\Microsoft\Babylon
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\BFlix
Key Deleted : HKLM\Software\BrowserCompanion
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\BabyDict
Key Deleted : HKLM\SOFTWARE\Classes\BabyGloss
Key Deleted : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Key Deleted : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Key Deleted : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Key Deleted : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Key Deleted : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Key Deleted : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Key Deleted : HKLM\SOFTWARE\Classes\BabyOptFile
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{183643C8-EE67-4574-9A38-927852E34163}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1DDA201E-5B42-4352-933E-21A92B297E3B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2656B92B-0207-4AFB-BEBF-F5FD231ECD39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4D25FB7A-8902-4291-960E-9ADA051CFBBF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54ECA872-DB2A-4C6B-BBB2-F3777C6786CC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{59570C1F-B692-48C9-91B4-7809E6945287}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{63A0F7FA-2C95-4D7E-AF25-EFCC303D20A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6559E502-6EE1-46B8-A83C-F3A45BDA23EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C63CA8A4-AB4E-49E5-A6C0-33FC86D80205}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C6A7847E-8931-4A9A-B4EF-72A91E3CCF4D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD0F1D24-E250-4E93-966C-65615720AEFB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EC1277BB-1C71-4C0D-BA6D-BFEA16E773A6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\ctbr.R404Pro
Key Deleted : HKLM\SOFTWARE\Classes\CToolbar.TB4Client
Key Deleted : HKLM\SOFTWARE\Classes\CToolbar.TB4Script
Key Deleted : HKLM\SOFTWARE\Classes\CToolbar.TB4Server
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Key Deleted : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Key Deleted : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Key Deleted : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\tbr
Key Deleted : HKLM\SOFTWARE\Classes\sim-packages
Key Deleted : HKLM\SOFTWARE\Classes\SmartBar.CT2481032
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Deleted : HKLM\SOFTWARE\Classes\tdataprotocol.CTData
Key Deleted : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1098640
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0C2E529C-A82C-4AC6-8807-0B51F7AD7BB2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{506F578A-91E1-46CE-830F-E2F4268E9966}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{63BEF061-5EFC-4753-9806-ED0573BC7C4B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E79BB61D-7F1A-41DF-8AD0-402795E3B566}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}
Key Deleted : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Key Deleted : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\conduitEngine
Key Deleted : HKLM\Software\CToolbar
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\DownTango
Key Deleted : HKLM\Software\facemoods.com
Key Deleted : HKLM\Software\free-downloads.net
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{181BFF26-FB11-4415-9BA8-C911A440F20D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F73C1CD-2413-4212-B4BE-F11301DBA52C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7459F1D0-9FB6-4D71-AA7B-9DECB34EB704}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEBB801F-11B1-436D-A513-EEF243E53349}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE0DD909-5BD5-47FF-B2E1-A890276381E3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Babylon Client
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\facemoods
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Babylon.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ECDEE021-0D17-467F-A1FF-C7A115230949}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5AD2AA7D-65FC-48E8-8195-1C4ADC99EC69}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BE034BA4-E7CA-4AD2-A885-28B960EDBAE1}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DA5BD2D3CA2D6943A1A233CD3F88CE7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC9EFC5C3366B4DB850DAB49330C52
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E98451C7CA808F47AFE467BDABD02FA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD11FD45FC7B9E46A8F4B69F3A66E35
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5979AD63CA2D6943A1A233CD3F88CE7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF9BD2952384A9C49B4A5D3D95329890
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABA2A33488410A4AA40489BD2224282
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{16726771-C380-4280-BAF9-1223B3838786}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A1194237-547A-461d-BD44-B97B1574A7DA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Babylon
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BFlix
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CToolbar_UNINSTALL
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DownTango
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\free-downloads.net Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wincore MediaBar
Key Deleted : HKLM\Software\uTorrentBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{28387537-E3F9-4ED7-860C-11E69AF4A8A0}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{ECDEE021-0D17-467F-A1FF-C7A115230949}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{ECDEE021-0D17-467F-A1FF-C7A115230949}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2481032&SSPV=TB_IESB22 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=umail3&s={searchTerms}&f=4 --> hxxp://www.google.com

-\\ Mozilla Firefox v15.0.1 (cs)

File : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\prefs.js

C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\vuyxtsam.default\user.js ... Deleted !

Deleted : user_pref("CT1098640..clientLogIsEnabled", false);
Deleted : user_pref("CT1098640..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT1098640..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT1098640.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT1098640.CTID", "CT1098640");
Deleted : user_pref("CT1098640.CommunitiesChangesLastCheckTime", "Sun Mar 06 2011 17:27:48 GMT+0100");
Deleted : user_pref("CT1098640.CommunityChanged", true);
Deleted : user_pref("CT1098640.CurrentServerDate", "6-3-2011");
Deleted : user_pref("CT1098640.DialogsAlignMode", "LTR");
Deleted : user_pref("CT1098640.DownloadDomainsCheckInterval", "168");
Deleted : user_pref("CT1098640.DownloadDomainsListLastCheckTime", "Tue Mar 01 2011 18:13:48 GMT+0100");
Deleted : user_pref("CT1098640.DownloadDomainsListLastServerUpdateTime", "1201073583");
Deleted : user_pref("CT1098640.DownloadReferralCookieData", "");
Deleted : user_pref("CT1098640.FeedLastCount128295885701037994", 0);
Deleted : user_pref("CT1098640.FeedPollDate128295885701037994", "Sun Mar 06 2011 16:59:20 GMT+0100");
Deleted : user_pref("CT1098640.FirstServerDate", "10-1-2011");
Deleted : user_pref("CT1098640.FirstTime", true);
Deleted : user_pref("CT1098640.FirstTimeFF3", true);
Deleted : user_pref("CT1098640.FixPageNotFoundErrors", true);
Deleted : user_pref("CT1098640.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT1098640.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT1098640.HasUserGlobalKeys", true);
Deleted : user_pref("CT1098640.Initialize", true);
Deleted : user_pref("CT1098640.InitializeCommonPrefs", true);
Deleted : user_pref("CT1098640.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT1098640.InstalledDate", "Mon Jan 10 2011 09:55:16 GMT+0100");
Deleted : user_pref("CT1098640.InvalidateCache", false);
Deleted : user_pref("CT1098640.IsGrouping", false);
Deleted : user_pref("CT1098640.IsMulticommunity", true);
Deleted : user_pref("CT1098640.IsOpenThankYouPage", false);
Deleted : user_pref("CT1098640.IsOpenUninstallPage", true);
Deleted : user_pref("CT1098640.LanguagePackLastCheckTime", "Sun Mar 06 2011 08:50:28 GMT+0100");
Deleted : user_pref("CT1098640.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT1098640.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT1098640.LastLogin_3.2.5.2", "Sun Mar 06 2011 14:57:12 GMT+0100");
Deleted : user_pref("CT1098640.LatestVersion", "3.2.5.2");
Deleted : user_pref("CT1098640.Locale", "en-us");
Deleted : user_pref("CT1098640.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT1098640.MCDetectTooltipShow", true);
Deleted : user_pref("CT1098640.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT1098640.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT1098640.RadioIsPodcast", false);
Deleted : user_pref("CT1098640.RadioLastCheckTime", "Sun Mar 06 2011 08:50:30 GMT+0100");
Deleted : user_pref("CT1098640.RadioLastUpdateIPServer", "0");
Deleted : user_pref("CT1098640.RadioLastUpdateServer", "128929877726170000");
Deleted : user_pref("CT1098640.RadioMediaID", "4817804");
Deleted : user_pref("CT1098640.RadioMediaType", "Media Player");
Deleted : user_pref("CT1098640.RadioMenuSelectedID", "EBRadioMenu_CT10986404817804");
Deleted : user_pref("CT1098640.RadioStationName", "Adult%20Alternative");
Deleted : user_pref("CT1098640.RadioStationURL", "hxxp://syndication.choiceradio.com/asxplay/asx-music/406.asx[...]
Deleted : user_pref("CT1098640.SHRINK_TOOLBAR", 1);
Deleted : user_pref("CT1098640.SavedHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CT1098640.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Deleted : user_pref("CT1098640.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109[...]
Deleted : user_pref("CT1098640.SearchInNewTabEnabled", true);
Deleted : user_pref("CT1098640.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT1098640.SearchInNewTabLastCheckTime", "Sun Mar 06 2011 08:50:27 GMT+0100");
Deleted : user_pref("CT1098640.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT1098640.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT1098640.ServiceMapLastCheckTime", "Sun Mar 06 2011 08:50:27 GMT+0100");
Deleted : user_pref("CT1098640.SettingsLastCheckTime", "Sun Mar 06 2011 16:59:20 GMT+0100");
Deleted : user_pref("CT1098640.SettingsLastUpdate", "1297856523");
Deleted : user_pref("CT1098640.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT1098640.ThirdPartyComponentsLastCheck", "Mon Feb 21 2011 15:27:54 GMT+0100");
Deleted : user_pref("CT1098640.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT1098640.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Deleted : user_pref("CT1098640.UserID", "UN70593685331222293");
Deleted : user_pref("CT1098640.ValidationData_Toolbar", 2);
Deleted : user_pref("CT1098640.WeatherNetwork", "");
Deleted : user_pref("CT1098640.WeatherPollDate", "Sun Mar 06 2011 17:27:50 GMT+0100");
Deleted : user_pref("CT1098640.WeatherUnit", "C");
Deleted : user_pref("CT1098640.myStuffEnabled", true);
Deleted : user_pref("CT1098640.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT1098640.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT1098640.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT1098640.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT1098640.testingCtid", "");
Deleted : user_pref("CT1098640.toolbarAppMetaDataLastCheckTime", "Sun Mar 06 2011 08:50:28 GMT+0100");
Deleted : user_pref("CT1098640.toolbarContextMenuLastCheckTime", "Mon Jan 10 2011 09:55:18 GMT+0100");
Deleted : user_pref("CT1098640.usagesFlag", 2);
Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "6-3-2011");
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Sun Mar 06 2011 17:27:48 GMT+0100");
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 550);
Deleted : user_pref("CT2786678.FeedPollDate129301619375443753", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375443759", "Sun Mar 06 2011 16:56:09 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444699", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444705", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444711", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444717", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444723", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444729", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444735", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444741", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444747", "Sun Mar 06 2011 16:56:08 GMT+0100");
Deleted : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Deleted : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Deleted : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Deleted : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "4-12-2010");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Sat Dec 04 2010 15:26:17 GMT+0100");
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.2.3.3", "Tue Dec 14 2010 11:44:16 GMT+0100");
Deleted : user_pref("CT2786678.LastLogin_3.2.5.2", "Sun Mar 06 2011 14:57:11 GMT+0100");
Deleted : user_pref("CT2786678.LatestVersion", "3.2.5.2");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.SavedHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CT2786678.SearchBoxWidth", 150);
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sun Mar 06 2011 08:50:23 GMT+0100");
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Sun Mar 06 2011 08:50:23 GMT+0100");
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Sun Mar 06 2011 16:59:20 GMT+0100");
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1297859874");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sun Feb 27 2011 10:28:55 GMT+0100");
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Deleted : user_pref("CT2786678.UserID", "UN72635374538588550");
Deleted : user_pref("CT2786678.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Sun Mar 06 2011 17:27:50 GMT+0100");
Deleted : user_pref("CT2786678.WeatherUnit", "C");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sat Dec 04 2010 15:26:18 GMT+0100");
Deleted : user_pref("CT2786678.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT1098640");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/5747/5719/CZ", "\"0\"");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1098640", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1098640/CT1098640[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/equalizer_de[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/minimize.gif[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/play.gif", "[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/stop.gif", "[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/vol.gif", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2786678");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar");
Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678,ConduitEngine,CT1098640");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,ConduitEngine,CT1098640");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Apr 10 2011 15:57:27 GMT+02[...]
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 21 2011 07:26:06 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 18:54:01 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "acdffa31-ab99-4dc3-964f-c7e4ec637643");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Mar 06 2011 08:50:24 GMT+0100");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1098640");
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jun 15 2011 06:10:23 GMT+0200");
Deleted : user_pref("ConduitEngine.CTID", "ConduitEngine");
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Jun 20 2011 14:30:31 GMT+0200");
Deleted : user_pref("ConduitEngine.FirstServerDate", "12/04/2010 17");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Deleted : user_pref("ConduitEngine.InstalledDate", "Sat Dec 04 2010 15:26:17 GMT+0100");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Tue Jun 21 2011 18:54:02 GMT+0200");
Deleted : user_pref("ConduitEngine.LastLogin_3.2.3.3", "Tue Dec 14 2010 11:44:18 GMT+0100");
Deleted : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 06 2011 16:56:10 GMT+0100");
Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Wed Jun 22 2011 06:11:09 GMT+0200");
Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Deleted : user_pref("ConduitEngine.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13"[...]
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Wed Jun 22 2011 06:11:09 GMT+0200");
Deleted : user_pref("ConduitEngine.UserID", "UN30372651583668432");
Deleted : user_pref("ConduitEngine.engineLocale", "cs");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Tue Jun 21 2011 18:54:02 GMT+0200");
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Wed Jun 22 2011 06:11:09 GMT+0200");
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Deleted : user_pref("ConduitEngine.usagesFlag", 2);
Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.defaultthis.engineName", "free-downloads.net Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&Sea[...]
Deleted : user_pref("browser.search.order.1", "Ask.com");
Deleted : user_pref("browser.search.selectedEngineInDialog", "Web Search (eToolKit)");
Deleted : user_pref("extensions.asktb.cbid", "H3");
Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={qsrc}&o={o}&l={l[...]
Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.imesh.com/web?src=ffb&systemid=[...]
Deleted : user_pref("extensions.asktb.fresh-install", false);
Deleted : user_pref("extensions.asktb.l", "dis");
Deleted : user_pref("extensions.asktb.last-config-req", "1313503370832");
Deleted : user_pref("extensions.asktb.locale", "en_EU");
Deleted : user_pref("extensions.asktb.o", "15851");
Deleted : user_pref("extensions.asktb.options-lang", "en");
Deleted : user_pref("extensions.asktb.options-locale", "UK");
Deleted : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Deleted : user_pref("extensions.asktb.qsrc", "2871");
Deleted : user_pref("extensions.asktb.r", "7");
Deleted : user_pref("extensions.asktb.search-history-queries", "www.zop.cz");
Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true);
Deleted : user_pref("extensions.asktb.v", "3.9.1.100006");
Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@Facemoods.com:1.3.0,{c2d64ff7-0ab8-4263-89c9-ea3b0f8f[...]
Deleted : user_pref("extensions.facemoods.aflt", "_#umail3");
Deleted : user_pref("extensions.facemoods.firstRun", false);
Deleted : user_pref("extensions.facemoods.lastActv", "11");
Deleted : user_pref("icqtoolbar.allowSendURL", false);
Deleted : user_pref("icqtoolbar.engineVerified", true);
Deleted : user_pref("icqtoolbar.geolastmodified", 1334127509);
Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Deleted : user_pref("icqtoolbar.history", "knihovna%20m%C4%9Bsta%20plzn%C4%9B||guitar%20hero%20aerosmith%20dow[...]
Deleted : user_pref("icqtoolbar.icqgeo", 42);
Deleted : user_pref("icqtoolbar.installTime", "1334131187");
Deleted : user_pref("icqtoolbar.installsource", "1");
Deleted : user_pref("icqtoolbar.itbsitescount", 0);
Deleted : user_pref("icqtoolbar.newtab_state", "1");
Deleted : user_pref("icqtoolbar.numberOfSearches", 1);
Deleted : user_pref("icqtoolbar.previousFFVersion", "11.0");
Deleted : user_pref("icqtoolbar.removedsitescount", 4);
Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Deleted : user_pref("icqtoolbar.suggestions", false);
Deleted : user_pref("icqtoolbar.uniqueID", "128742101012874209861287496942175");
Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1334127528);
Deleted : user_pref("icqtoolbar.version", "2.0.1.6");
Deleted : user_pref("icqtoolbar.voucherHideClicks", 0);
Deleted : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Deleted : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Deleted : user_pref("icqtoolbar.voucherWasShown", 0);
Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");
Deleted : user_pref("keyword.URL", "hxxp://search.imesh.com/web?src=ffb&systemid=1&q=");

File : C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\prefs.js

C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\user.js ... Deleted !

Deleted : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Deleted : user_pref("CT2481032.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Deleted : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT2481032.FirstTime", "true");
Deleted : user_pref("CT2481032.FirstTimeFF3", "true");
Deleted : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Deleted : user_pref("CT2481032.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT2481032.RevertSettingsEnabled", true);
Deleted : user_pref("CT2481032.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT248[...]
Deleted : user_pref("CT2481032.UserID", "UN67161718284188254");
Deleted : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT2481032.autoDisableScopes", -1);
Deleted : user_pref("CT2481032.browser.search.defaultthis.engineName", true);
Deleted : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Deleted : user_pref("CT2481032.cbfirsttime.enc", "VHVlIEphbiAwMSAyMDEzIDE4OjU1OjI2IEdNVCswMTAw");
Deleted : user_pref("CT2481032.defaultSearch", "true");
Deleted : user_pref("CT2481032.embeddedsData", "[{\"appId\":\"129058858240125318\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT2481032.enableAlerts", "false");
Deleted : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT2481032.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT2481032.firstTimeDialogOpened", "true");
Deleted : user_pref("CT2481032.fixPageNotFoundError", "true");
Deleted : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT2481032.fixUrls", true);
Deleted : user_pref("CT2481032.installId", "conduitnsisintegration");
Deleted : user_pref("CT2481032.installType", "conduitnsisintegration");
Deleted : user_pref("CT2481032.isCheckedStartAsHidden", true);
Deleted : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT2481032.isNewTabEnabled", true);
Deleted : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT2481032.keyword", true);
Deleted : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT2481032.lastVersion", "10.14.42.7");
Deleted : user_pref("CT2481032.migrateAppsAndComponents", true);
Deleted : user_pref("CT2481032.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Deleted : user_pref("CT2481032.openThankYouPage", "false");
Deleted : user_pref("CT2481032.openUninstallPage", "false");
Deleted : user_pref("CT2481032.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Deleted : user_pref("CT2481032.price-gong.isManagedApp", "true");
Deleted : user_pref("CT2481032.revertSettingsEnabled", "false");
Deleted : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Deleted : user_pref("CT2481032.search.searchCount", "0");
Deleted : user_pref("CT2481032.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnet_lastUpdate", "1359984234964");
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnnbrk_lastUpdate", "1359984234903");
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-computeractive_lastUpdate", "13599842349[...]
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-dailymirror_lastUpdate", "1359984235280"[...]
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-google_lastUpdate", "1359984235092");
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-techcrunch_lastUpdate", "1359984235028")[...]
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-thesun_news_lastUpdate", "1359984234933"[...]
Deleted : user_pref("CT2481032.serviceLayer_services_app.twitter.user-wired_lastUpdate", "1359984235246");
Deleted : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1359231568275");
Deleted : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1359984223422");
Deleted : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1359231568013");
Deleted : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359984223803");
Deleted : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1359231568347");
Deleted : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1359984223928");
Deleted : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1359984223323");
Deleted : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1359231567633");
Deleted : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1359984223577");
Deleted : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1359984223706");
Deleted : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Deleted : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1362414174604");
Deleted : user_pref("CT2481032.settingsINI", true);
Deleted : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Deleted : user_pref("CT2481032.smartbar.Uninstall", "0");
Deleted : user_pref("CT2481032.smartbar.homepage", true);
Deleted : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Deleted : user_pref("CT2481032.toolbarBornServerTime", "1-1-2013");
Deleted : user_pref("CT2481032.toolbarCurrentServerTime", "4-2-2013");
Deleted : user_pref("CT2481032.url_history0001.enc", "aHR0cDovL3d3dy5ub3Zpbmt5LmN6L2hvcm9za29wLzo6OmNsaWNraGFu[...]
Deleted : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=1[...]
Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Ashampoo US Customized Web Search");
Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481032[...]
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&q[...]
Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT2481032");
Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted : user_pref("browser.babylon.HPOnNewTab,s", "s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s,s[...]
Deleted : user_pref("browser.newtab.url", "hxxp://www.claro-search.com/?affID=115779&tt=4 ... c=NT_ss&mn[...]
Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.defaultenginename,S", "Search the web (Babylon)");
Deleted : user_pref("browser.search.order.1,S", "Search the web (Babylon)");
Deleted : user_pref("browser.search.selectedEngine", "Ashampoo US Customized Web Search");
Deleted : user_pref("browser.search.selectedEngine,S", "Search the web (Babylon)");
Deleted : user_pref("browser.startup.homepage", "hxxp://search.imesh.com/");
Deleted : user_pref("extensions.506ec633f3695.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Deleted : user_pref("extensions.506ec65671121.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Deleted : user_pref("extensions.BabylonToolbar.admin", false);
Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
Deleted : user_pref("extensions.BabylonToolbar.id", "605035b100000000000000ff2906f01a");
Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15549");
Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.29.1");
Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.29.1");
Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babclient");
Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112060&tt=3012_7");
Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "605035b100000000000000ffb85175cc");
Deleted : user_pref("extensions.BabylonToolbar_i.id", "605035b100000000000000ffb85175cc");
Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15446");
Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "std");
Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.claro-search.com/?affID=115779&tt=451[...]
Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.29.111:28:34");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.imesh.com/web?src=ffb&systemid=[...]
Deleted : user_pref("extensions.efwbjkbewre83sfr3.scode", "(function(){try{if('aol.com,mail.google.com,mystart[...]
Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.2.0,{28387537-e3f9-4ed7-860c-11e69af4a8[...]
Deleted : user_pref("keyword.URL", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&qsrc=2869&apn_dtid=^YYYYYY^[...]
Deleted : user_pref("keyword.URL,h", "hxxp://search.babylon.com/?babsrc=KW_def&affID=109170&q=");
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=13[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.originalHomepage", "hxxp://search.imesh.com/");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://eu.ask.com/web?l=dis&o=APN10383&gct=kwd&qsrc=[...]
Deleted : user_pref("smartbar.originalSearchEngine", "Ask.com");
Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.imesh.com/");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.imesh.com/web?src=ffb&systemid=1&q=[...]
Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Deleted : user_pref("sweetim.toolbar.search.history", "Ucitel%20hrani%20na");
Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "true");
Deleted : user_pref("sweetim.toolbar.simapp_id", "{4FA92ED5-C89B-11E0-A9BA-00241DC5191D}");
Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?barid={4FA92ED5-C89B-11E0-A9BA-[...]

-\\ Google Chrome v25.0.1364.97

File : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.25] : icon_url = "hxxp://facemoods.com/favicon.ico",
Deleted [l.28] : keyword = "facemoods.com",
Deleted [l.31] : search_url = "hxxp://start.facemoods.com/?a=umail3&s={searchTerms}&f=4",

File : C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.3027] : urls_to_restore_on_startup = [ "hxxp://www.claro-search.com/?affID=115779&tt=4512_3&babsrc=HP[...]

*************************

AdwCleaner[R1].txt - [97828 octets] - [04/03/2013 18:41:15]
AdwCleaner[S1].txt - [98242 octets] - [04/03/2013 18:51:33]

########## EOF - C:\AdwCleaner[S1].txt - [98303 octets] ##########

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL logfile created on: 4.3.2013 19:03:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dannyv\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 64,64% Memory free
6,50 Gb Paging File | 4,95 Gb Available in Paging File | 76,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 17,66 Gb Free Space | 18,08% Space Free | Partition Type: NTFS
Drive D: | 360,28 Gb Total Space | 100,14 Gb Free Space | 27,79% Space Free | Partition Type: NTFS

Computer Name: PC-PC | User Name: Dannyv | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.03.04 19:01:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dannyv\Desktop\OTL.exe
PRC - [2013.02.25 07:39:34 | 001,602,984 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\steam.exe
PRC - [2013.02.25 07:39:32 | 000,543,144 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe
PRC - [2013.02.21 06:23:46 | 001,274,320 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2013.01.31 10:38:54 | 003,289,208 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.12.18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.12.04 17:20:52 | 000,773,728 | ---- | M] (ZONER software) -- C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
PRC - [2012.11.16 21:45:20 | 000,453,632 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012.11.16 21:44:46 | 000,217,088 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012.06.15 23:48:30 | 005,366,400 | ---- | M] (MicroSmarts LLC.) -- C:\Program Files\CheckUpPC\PCCheckUp.exe
PRC - [2011.08.25 10:35:18 | 001,584,472 | ---- | M] (IObit) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2011.06.15 14:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011.04.27 14:39:26 | 000,208,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
PRC - [2011.04.27 14:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe


========== Modules (No Company Name) ==========

MOD - [2013.02.27 17:48:47 | 014,718,320 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_171.dll
MOD - [2013.02.25 07:39:32 | 000,988,584 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2013.02.21 06:23:44 | 000,459,728 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\25.0.1364.97\ppgooglenaclpluginchrome.dll
MOD - [2013.02.21 06:23:42 | 004,050,896 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\25.0.1364.97\pdf.dll
MOD - [2013.02.21 06:22:51 | 000,596,944 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\25.0.1364.97\libglesv2.dll
MOD - [2013.02.21 06:22:50 | 000,124,368 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\25.0.1364.97\libegl.dll
MOD - [2013.02.21 06:22:48 | 001,552,848 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll
MOD - [2013.02.19 11:48:10 | 020,340,648 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2012.12.18 18:28:50 | 000,647,168 | ---- | M] () -- C:\Program Files\Steam\sdl.dll
MOD - [2012.12.11 09:51:10 | 001,100,800 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll
MOD - [2012.12.11 09:51:10 | 000,192,000 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll
MOD - [2012.12.11 09:51:10 | 000,124,416 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll
MOD - [2012.11.16 15:09:18 | 000,369,152 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2012.11.13 21:53:04 | 000,121,472 | ---- | M] () -- C:\Program Files\Razer\Razer Game Booster\GBV3ContextMenu.dll
MOD - [2011.10.16 09:52:18 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\273292e88c7b60ecbae9d85e94cd097e\WindowsFormsIntegration.ni.dll
MOD - [2011.10.16 09:50:33 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dd56ffc9d534de278c79420dcce058a4\System.Core.ni.dll
MOD - [2011.10.15 06:54:57 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07cdef1a740151932dcf161f3306bd9c\PresentationFramework.Aero.ni.dll
MOD - [2011.10.15 06:54:52 | 014,339,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\70e2ca33ffa52c743285dc5b4910a229\PresentationFramework.ni.dll
MOD - [2011.10.15 06:54:39 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\bb1d36ae26e7cadf563061596682e747\UIAutomationProvider.ni.dll
MOD - [2011.10.15 06:54:38 | 012,234,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7c94a121334aeca7553c7f01290740f0\PresentationCore.ni.dll
MOD - [2011.10.15 06:54:29 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d7a64c28cf0c90e6c48af4f7d6f9ed41\WindowsBase.ni.dll
MOD - [2011.10.15 06:54:22 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2011.10.15 06:54:08 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b2622080e047040fa044dd21a04ff10d\System.Runtime.Remoting.ni.dll
MOD - [2011.10.15 06:54:01 | 011,819,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\8e7909ef6b5f953d49244c6b9f5f5100\System.Web.ni.dll
MOD - [2011.10.15 06:53:50 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2011.10.15 06:53:46 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2011.10.15 06:53:42 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2011.10.15 06:53:33 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2011.10.15 06:53:11 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011.08.19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files\IObit\Smart Defrag 2\NtfsData.dll
MOD - [2011.06.28 12:54:41 | 000,043,520 | ---- | M] () -- C:\Windows\System32\CmdLineExt03.dll
MOD - [2010.11.13 03:37:03 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.05 02:53:44 | 000,237,568 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010.11.05 02:53:43 | 000,106,496 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2010.11.05 02:53:33 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll
MOD - [2010.03.15 10:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010.01.30 02:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2007.02.25 06:09:06 | 000,118,784 | ---- | M] () -- C:\Program Files\CheckUpPC\JkDefrag.dll


========== Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - File not found [Auto | Stopped] -- C:\HRY\Grisoft\AVGFRE~1\avgamsvr.exe -- (Avg7Alrt)
SRV - [2013.02.27 17:48:48 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.02.25 07:39:32 | 000,543,144 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.02.05 16:48:00 | 000,235,216 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe -- (McComponentHostService)
SRV - [2013.01.31 10:38:54 | 003,289,208 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013.01.08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.12.18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.12.13 11:44:42 | 000,114,144 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.12.10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.11.16 21:44:46 | 000,217,088 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.11.11 17:34:07 | 004,539,712 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_ce5ba24.dll -- (Akamai)
SRV - [2012.11.02 15:57:16 | 001,699,168 | ---- | M] (TuneUp Software) [Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012.07.19 17:08:04 | 000,738,152 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012.07.13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2012.06.26 15:35:20 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Disabled | Stopped] -- C:\Program Files\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2012.04.06 07:10:50 | 000,624,856 | ---- | M] (Pandora.TV) [Disabled | Stopped] -- C:\Program Files\PANDORA.TV\PanService\PandoraService.exe -- (PanService)
SRV - [2011.05.29 08:37:24 | 000,073,600 | ---- | M] () [Auto | Running] -- C:\Windows\System32\ezGOSvc.dll -- (ezGOSvc)
SRV - [2011.04.27 14:39:26 | 000,208,944 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV - [2011.04.27 14:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2010.06.01 02:00:18 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.04.05 20:55:01 | 000,116,104 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2010.03.25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009.09.18 17:48:28 | 000,009,216 | ---- | M] (Vodafone) [Disabled | Stopped] -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva393.sys -- (XDva393)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva392.sys -- (XDva392)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva391.sys -- (XDva391)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva390.sys -- (XDva390)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva385.sys -- (XDva385)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (as3p0e4s)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (afjb2taz)
DRV - [2013.02.01 14:01:00 | 000,086,544 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2012.11.16 22:07:06 | 010,070,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2012.11.16 22:07:06 | 010,070,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012.11.16 20:38:48 | 000,290,304 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012.11.13 21:53:00 | 000,014,416 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys -- (WinRing0_1_2_0)
DRV - [2012.09.19 09:50:50 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.12.01 11:40:16 | 000,056,496 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NBVol.sys -- (NBVol)
DRV - [2011.12.01 11:40:16 | 000,012,464 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NBVolUp.sys -- (NBVolUp)
DRV - [2011.10.01 18:37:01 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.10.01 18:37:00 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.09.12 17:43:12 | 000,057,152 | ---- | M] (Toolkit Development, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\toolkitdisk.sys -- (ToolkitDisk)
DRV - [2011.04.27 14:25:24 | 000,065,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2011.04.18 12:18:50 | 000,043,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MpNWMon.sys -- (MpNWMon)
DRV - [2011.04.14 12:19:33 | 000,431,672 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010.11.26 18:02:20 | 000,015,672 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2010.11.20 13:30:17 | 000,296,064 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vpcvmm.sys -- (vpcvmm)
DRV - [2010.11.20 13:30:17 | 000,172,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vpchbus.sys -- (vpcbus)
DRV - [2010.11.20 11:50:38 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vpcusb.sys -- (vpcusb)
DRV - [2010.11.20 11:50:37 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.03.04 14:40:03 | 000,667,744 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avg7core.sys -- (Avg7Core)
DRV - [2010.01.01 08:21:26 | 000,137,344 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hwpsgt.sys -- (hwpsgt)
DRV - [2010.01.01 08:21:23 | 000,009,472 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lemsgt.sys -- (lemsgt)
DRV - [2009.09.16 07:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901t.sys -- (tap0901t)
DRV - [2009.07.23 11:57:22 | 000,112,128 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009.07.23 11:57:22 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.07.23 11:57:22 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009.07.13 23:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2009.03.18 15:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2007.06.29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006.02.21 12:12:00 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02)
DRV - [2005.09.29 18:01:51 | 000,066,048 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2005.08.10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.05.16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?src=maxpc
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - SOFTWARE\Classes\CLSID\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}\InprocServer32 File not found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?src=maxpc
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?src=maxpc
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\URLSearchHook: {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - SOFTWARE\Classes\CLSID\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}\InprocServer32 File not found
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\URLSearchHook: {6687d232-24bc-4ba0-b7cc-26b878bd4c11} - SOFTWARE\Classes\CLSID\{6687d232-24bc-4ba0-b7cc-26b878bd4c11}\InprocServer32 File not found
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\SearchScopes\{30750DD1-EADD-4cf1-A485-C736C96936AB}: "URL" = http://search.etoolkit.com/search?q={se ... 4ef1dc&s=p
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..\SearchScopes\{C8B44F7A-4830-48FB-9105-A084636B9171}: "URL" = http://websearch.ask.com/redirect?clien ... 18D2485929
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>

========== FireFox ==========

FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/Beemp3: C:\Program Files\ToolKitService\npapi\np-beemp3.dll (eToolKit Ltd.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/eOffers: C:\Program Files\ToolKitService\npapi\np-eoffers.dll (eToolKit Ltd.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/FaceBook: C:\Program Files\ToolKitService\npapi\np-facebook.dll (ToolKit Development Ltd.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/Radio: C:\Program Files\ToolKitService\npapi\np-radio.dll (eToolKit Ltd.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/Settings: C:\Program Files\ToolKitService\npapi\np-settings.dll (eToolKit Ltd.)
FF - HKLM\Software\MozillaPlugins\@etoolkit.com/toolbar: C:\Program Files\ToolKitService\npapi\np-toolbar.dll (ToolKit Development Ltd)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Dannyv\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Dannyv\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.12.31 22:09:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.12.13 11:44:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.02.23 07:54:33 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\toolkit@toolkitdevelopment.com: C:\Program Files\ToolKitService\ffext [2012.08.28 13:49:53 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.12.13 11:44:43 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.02.23 07:54:33 | 000,000,000 | ---D | M]

[2010.11.05 13:57:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Extensions
[2013.03.04 18:52:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions
[2013.01.02 18:08:52 | 000,000,000 | ---D | M] (Browser Backgrounds) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{3e0c7f3a-3f50-4730-beb5-4a9a10e2831c}
[2012.12.14 15:04:19 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2012.10.05 15:03:49 | 000,000,000 | ---D | M] (Click2Save) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\506ec633f35e9@506ec633f3622.com
[2012.10.05 15:03:49 | 000,000,000 | ---D | M] (Click2Save) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\506ec65671074@506ec656710ad.com
[2013.02.15 13:40:33 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\info@djzig.com
[2012.02.08 14:43:33 | 000,000,000 | ---D | M] (Bflix) -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\extensions\info@thebflix.com
[2013.02.04 14:22:06 | 000,001,052 | ---- | M] () -- C:\Users\Dannyv\AppData\Roaming\Mozilla\Firefox\Profiles\dqfhgpv0.default\searchplugins\ashampoo-us-customized-web-search.xml
[2012.07.30 09:51:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.02.13 12:57:21 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.07.30 09:51:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
File not found (No name found) -- C:\USERS\DANNYV\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DQFHGPV0.DEFAULT\EXTENSIONS\{124D001A-BDCB-472F-AA59-BBE7E4BC3204}
File not found (No name found) -- C:\USERS\DANNYV\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DQFHGPV0.DEFAULT\EXTENSIONS\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
File not found (No name found) -- C:\USERS\DANNYV\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DQFHGPV0.DEFAULT\EXTENSIONS\{6687D232-24BC-4BA0-B7CC-26B878BD4C11}
File not found (No name found) -- C:\USERS\DANNYV\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DQFHGPV0.DEFAULT\EXTENSIONS\BBRS_002@BLABBERS.COM
File not found (No name found) -- C:\USERS\DANNYV\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DQFHGPV0.DEFAULT\EXTENSIONS\FFXTLBR@BABYLON.COM
[2012.12.13 11:44:43 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.07.14 15:41:58 | 000,002,029 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\esnips.xml
[2012.02.12 12:42:50 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.02.12 12:42:50 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.02.12 12:42:50 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.02.12 12:42:50 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.02.11 19:48:53 | 000,044,251 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\toolkitsearch.xml
[2012.02.12 12:42:50 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: https://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\BabylonChromePI.dll
CHR - plugin: etoolkit Dynamic Link Library (Enabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaagjcfjefodfnlpnmopkkbpgclipnpn\1.1.6_0\CrazyOffers.dll
CHR - plugin: etoolkit Dynamic Link Library (Enabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\jchankggehakkafdlalgmfbodgfilnbg\0.5_0\FacebookPlugin.dll
CHR - plugin: etoolkit Dynamic Link Library (Enabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\jedcimnjemkbmkkngncfgfpjgfcapimk\0.9.1_0\extmanager.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Dannyv\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Dannyv\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - Extension: FacebookChat = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\eelchhiiipbeleiimmhpdfbagkcjdmdm\0.5_0\
CHR - Extension: FacebookLike = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\fppahmlkambbejgkiidklamcmhealjag\0.7_0\
CHR - Extension: FacebookMain = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\jchankggehakkafdlalgmfbodgfilnbg\1.1_0\
CHR - Extension: Skype Click to Call = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.6.0.11664_0\
CHR - Extension: Battlefield Play4Free = C:\Users\Dannyv\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.80.5_0\

O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (Ashampoo_US Toolbar) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll File not found
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Click2Save Class) - {66997042-DB2C-AA3C-3D8F-8C21BFE797EA} - C:\ProgramData\Click2Save\506ec633f377a.ocx ()
O2 - BHO: (ToolKit IE Helper) - {70EA269E-56DF-49C2-86B2-1A1924ED88B4} - C:\Program Files\ToolKitService\splash.dll (ToolKit Development, Ltd)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Click2Save Class) - {C447B939-5551-0E14-7EC6-11B4B2954854} - C:\ProgramData\Click2Save\506ec65671211.ocx ()
O3 - HKLM\..\Toolbar: (Ashampoo_US Toolbar) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Users\Dannyv\AppData\LocalLow\CT2481032\ldrtbAsha.dll File not found
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AMD AVT] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Google Updater] C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [PC-Checkup] C:\Program Files\CheckUpPC\PCCheckUp.exe (MicroSmarts LLC.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003..\Run: [uTorrent] D:\Danny muzika\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe (ZONER software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mafia2.pif ()
O4 - Startup: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Od&eslat do aplikace OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Danny muzika\ICQ7.2\ICQ.exe File not found
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Danny muzika\ICQ7.2\ICQ.exe File not found
O9 - Extra Button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2498825763-850277669-1110203184-1003\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_33)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E49A956-48A1-4428-95FF-5ACE21969D54}: DhcpNameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2906F01A-4279-4DE7-910E-B38CF5251662}: DhcpNameServer = 7.254.254.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{98E73B86-E0CC-43B3-AC90-8E0C2727F464}: DhcpNameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEA18497-461D-4BEF-8233-F3810C723C12}: NameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{4dec4f41-6689-11e0-9e8c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4dec4f41-6689-11e0-9e8c-806e6f6e6963}\Shell\AutoRun\command - "" = K:\Autorun.exe
O33 - MountPoints2\{b2a51515-32c3-11e1-a01b-00241dc5191d}\Shell - "" = AutoRun
O33 - MountPoints2\{b2a51515-32c3-11e1-a01b-00241dc5191d}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{e7b084d5-33f3-11e1-b776-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{e7b084d5-33f3-11e1-b776-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{e7b08539-33f3-11e1-b776-00241dc5191d}\Shell - "" = AutoRun
O33 - MountPoints2\{e7b08539-33f3-11e1-b776-00241dc5191d}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: ezGOSvc - C:\Windows\System32\ezGOSvc.dll ()
NetSvcs: Files\NVIDIA Corporation\PhysX\Common;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Windows Live\Shared;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\FreeArc\bin - File not found
NetSvcs: PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC - File not found
NetSvcs: PROCESSOR_ARCHITECTURE=x86 - File not found
NetSvcs: PROCESSOR_IDENTIFIER=x86 Family - File not found

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.vorbis - C:\Windows\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv31 - C:\Windows\System32\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv32 - C:\Windows\System32\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv41 - C:\Windows\System32\ir41_32.ax (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\Windows\System32\xfcodec.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013.03.04 19:00:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Dannyv\Desktop\OTL.exe
[2013.03.04 18:36:51 | 000,385,440 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\Dannyv\Desktop\sc-cleaner.exe
[2013.03.04 17:38:35 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013.03.04 17:38:35 | 000,000,000 | ---D | C] -- C:\rsit
[2013.03.04 17:26:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013.03.03 17:16:28 | 000,000,000 | ---D | C] -- C:\ATI
[2013.03.02 16:05:51 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\Fatshark
[2013.03.01 11:08:31 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\JaiboGames
[2013.03.01 11:06:54 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hry.cz
[2013.03.01 11:06:54 | 000,000,000 | ---D | C] -- C:\Program Files\Hry.cz
[2013.02.28 14:16:22 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CheckUpPC
[2013.02.28 14:16:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckUpPC
[2013.02.28 14:16:20 | 000,000,000 | ---D | C] -- C:\Program Files\CheckUpPC
[2013.02.28 13:53:33 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013.02.27 11:32:16 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\Doublefine
[2013.02.26 14:24:55 | 000,121,984 | ---- | C] (Valve Corporation) -- C:\Windows\System32\steam_api.dll
[2013.02.26 14:21:06 | 000,000,000 | ---D | C] -- C:\Users\Dannyv\AppData\Roaming\dll-files.com
[2013.02.26 14:20:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
[2013.02.26 14:20:39 | 000,000,000 | ---D | C] -- C:\Program Files\Dll-Files.com Fixer
[11 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[10 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2013.03.04 19:06:07 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.04 19:06:00 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.04 19:05:53 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.03.04 19:01:19 | 000,010,096 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.04 19:01:19 | 000,010,096 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.04 19:01:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dannyv\Desktop\OTL.exe
[2013.03.04 18:53:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.04 18:53:36 | 2616,057,856 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.04 18:48:03 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.04 18:40:01 | 000,000,986 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003UA.job
[2013.03.04 18:37:18 | 000,594,019 | ---- | M] () -- C:\Users\Dannyv\Desktop\adwcleaner.exe
[2013.03.04 18:36:53 | 000,385,440 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\Dannyv\Desktop\sc-cleaner.exe
[2013.03.04 18:36:28 | 000,015,155 | ---- | M] () -- C:\Users\Dannyv\Desktop\Nový Textový dokument OpenDocument.odt
[2013.03.04 17:45:15 | 000,781,383 | ---- | M] () -- C:\Users\Dannyv\Desktop\RSIT.exe
[2013.03.04 14:31:00 | 000,000,960 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2013.03.03 09:40:00 | 000,000,964 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003Core.job
[2013.03.02 17:59:09 | 000,000,560 | ---- | M] () -- C:\Users\Public\Desktop\Far Cry 3.lnk
[2013.03.02 14:21:13 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
[2013.03.01 11:07:31 | 000,001,181 | ---- | M] () -- C:\Users\Dannyv\Desktop\Heroes of Hellas 3 Athény.lnk
[2013.02.27 17:48:48 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.02.27 17:48:48 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.02.27 14:24:43 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013.02.26 14:24:56 | 000,121,984 | ---- | M] (Valve Corporation) -- C:\Windows\System32\steam_api.dll
[2013.02.26 14:20:47 | 000,001,052 | ---- | M] () -- C:\Users\Public\Desktop\Dll-Files Fixer.lnk
[11 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[10 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.03.04 19:05:53 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.03.04 18:36:59 | 000,594,019 | ---- | C] () -- C:\Users\Dannyv\Desktop\adwcleaner.exe
[2013.03.04 18:36:07 | 000,015,155 | ---- | C] () -- C:\Users\Dannyv\Desktop\Nový Textový dokument OpenDocument.odt
[2013.03.04 17:45:00 | 000,781,383 | ---- | C] () -- C:\Users\Dannyv\Desktop\RSIT.exe
[2013.03.02 17:59:09 | 000,000,560 | ---- | C] () -- C:\Users\Public\Desktop\Far Cry 3.lnk
[2013.03.01 11:07:31 | 000,001,181 | ---- | C] () -- C:\Users\Dannyv\Desktop\Heroes of Hellas 3 Athény.lnk
[2013.02.26 14:21:17 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
[2013.02.26 14:21:16 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013.02.26 14:20:47 | 000,001,052 | ---- | C] () -- C:\Users\Public\Desktop\Dll-Files Fixer.lnk
[2013.02.13 15:18:49 | 000,703,117 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\technic-launcher.jar
[2013.02.01 14:00:01 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2013.02.01 13:59:41 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2013.02.01 13:59:28 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012.12.21 15:38:48 | 000,111,664 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\icarus-dxdiag.xml
[2012.12.11 11:44:45 | 000,000,094 | ---- | C] () -- C:\Users\Dannyv\AppData\Local\fusioncache.dat
[2012.11.16 16:01:04 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.10.06 12:48:30 | 000,106,496 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\C57C.exe
[2012.10.06 12:26:23 | 000,000,369 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\83CA.exe
[2012.10.06 12:04:31 | 000,106,496 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\7F27.exe
[2012.10.06 11:42:47 | 000,106,496 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\9A05.exe
[2012.10.06 11:36:08 | 000,106,496 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\855B.exe
[2012.08.02 15:18:02 | 003,130,440 | ---- | C] () -- C:\Windows\System32\pbsvc_blr.exe
[2012.06.19 14:02:17 | 003,123,272 | R--- | C] () -- C:\Windows\System32\pbsvc.exe
[2012.06.09 17:01:54 | 000,000,161 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2012.05.13 13:39:18 | 000,000,583 | ---- | C] () -- C:\Windows\QIII.INI
[2012.04.18 18:39:06 | 000,028,672 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012.03.06 18:59:32 | 000,618,823 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012.01.29 18:21:54 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2011.11.25 17:03:10 | 000,020,312 | ---- | C] () -- C:\Windows\System32\RegistryDefragBootTime.exe
[2011.11.25 16:54:59 | 000,025,944 | ---- | C] () -- C:\Windows\System32\SmartDefragBootTime.exe
[2011.11.25 16:54:59 | 000,015,672 | ---- | C] () -- C:\Windows\System32\drivers\SmartDefragDriver.sys
[2011.09.23 12:36:12 | 000,000,043 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\TheHunterSettings_local.cfg
[2011.08.08 08:27:20 | 000,138,904 | ---- | C] () -- C:\Users\Dannyv\AppData\Roaming\PnkBstrK.sys
[2011.06.15 06:26:30 | 000,073,600 | ---- | C] () -- C:\Windows\System32\ezGOSvc.dll
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.07.23 16:51:14 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009.08.28 14:16:16 | 000,130,238 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4

========== ZeroAccess Check ==========

[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2011.11.25 17:13:47 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.12.14 18:54:19 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\.minecraft
[2013.02.13 15:19:22 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\.techniclauncher
[2012.02.12 17:28:58 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Alawar Entertainment
[2010.12.02 07:33:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ankh - Heart of Osiris
[2011.10.22 10:49:11 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Artogon
[2012.12.30 17:34:39 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ashampoo
[2012.11.19 21:09:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Assassin's Creed III
[2012.02.05 09:29:38 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Bioshock
[2012.02.05 12:21:00 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Bioshock2
[2012.12.30 17:58:17 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Canneverbe Limited
[2011.12.26 19:48:47 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Canon
[2013.01.31 15:37:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Clickteam
[2011.07.26 18:29:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DAEMON Tools Lite
[2012.09.03 19:29:06 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DarknessII
[2012.12.24 18:13:01 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Day 1 Studios
[2011.08.04 08:59:09 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DisneyInteractiveStudios
[2013.02.26 14:21:06 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\dll-files.com
[2013.02.27 11:32:16 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Doublefine
[2011.08.04 08:00:22 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\ERS G-Studio
[2013.02.09 13:43:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\ERS Game Studios
[2013.03.02 16:05:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Fatshark
[2012.09.18 15:24:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\fltk.org
[2011.09.09 11:06:20 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\FreeArc
[2010.11.26 15:47:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Hi-Rez Studios
[2011.08.16 13:58:10 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\HU2011
[2011.11.25 16:55:00 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\IObit
[2013.03.01 11:08:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\JaiboGames
[2012.09.12 13:18:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Lionhead Studios
[2013.02.13 15:18:47 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\logs
[2011.10.21 18:37:48 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Might & Magic Heroes VI
[2010.11.17 09:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade
[2011.09.06 12:55:50 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade Warband
[2011.09.05 13:20:50 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade With Fire and Sword
[2012.02.11 19:35:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\MusicNet
[2010.11.30 12:19:09 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\OpenOffice.org
[2012.12.02 08:12:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Origin
[2012.10.28 08:43:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Publish Providers
[2011.10.15 09:16:44 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\PunkBuster
[2012.05.20 07:51:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Raptr
[2012.11.08 19:34:15 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Rovio
[2012.10.28 08:56:10 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Sony
[2012.11.21 11:18:44 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Theta
[2013.01.01 10:28:32 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Touchstone
[2012.09.06 17:17:54 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\TS3Client
[2012.12.30 17:58:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\TuneUp Software
[2012.07.28 10:39:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Tunngle
[2012.06.27 18:02:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ubisoft
[2011.08.04 12:02:16 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ulozto File Manager
[2012.04.06 18:26:59 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Unity
[2013.03.04 18:59:56 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\uTorrent
[2011.12.30 11:27:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Vodafone
[2012.09.07 21:24:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\wargaming.net
[2012.12.02 16:32:49 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Warner Bros. Interactive Entertainment
[2012.01.07 10:00:58 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\WB Games
[2013.01.02 12:14:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Zoner
[2011.07.04 15:37:36 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Activision
[2010.11.10 16:13:59 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Ankh
[2010.11.10 16:56:13 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Ankh - Heart of Osiris
[2011.07.24 17:02:30 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Artogon
[2011.06.18 20:04:24 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Awem
[2011.06.13 16:09:43 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\BlackBean
[2011.07.24 12:07:41 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\BlamGames
[2011.04.14 12:24:36 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\DAEMON Tools Lite
[2011.05.10 15:45:25 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Disney Interactive Studios
[2011.06.13 06:12:10 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\DisneyInteractiveStudios
[2011.07.24 15:25:47 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\ERS G-Studio
[2011.07.18 12:03:05 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\fizzy
[2010.05.28 16:09:07 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Gearbox Software
[2011.07.19 06:24:13 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\go
[2010.10.02 07:22:26 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Hi-Rez Studios
[2011.05.05 14:52:08 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\ICQ
[2012.01.08 09:04:03 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\IObit
[2011.02.20 15:57:18 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\ITTerritory
[2011.07.24 11:47:46 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Ladia Group
[2011.06.12 14:47:20 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Leadertech
[2011.07.14 15:42:02 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Logia
[2011.06.12 09:48:53 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\LucasArts
[2010.11.14 09:06:24 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Mount&Blade
[2010.04.16 14:55:00 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Mount&Blade Warband
[2011.05.08 16:30:31 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Mount&Blade With Fire and Sword
[2011.07.03 17:01:12 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\My Battle for Middle-earth Files
[2011.07.03 17:09:49 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2011.07.03 18:12:23 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\My The Lord of the Rings, The Rise of the Witch-king Files
[2010.03.16 20:51:04 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\OpenOffice.org
[2010.01.04 14:19:03 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Petroglyph
[2011.03.16 14:03:39 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\PunkBuster
[2011.08.04 05:23:49 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Raptr
[2011.04.06 14:50:00 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\SPORE
[2010.03.16 20:54:18 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\TeamViewer
[2011.07.18 14:23:48 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\The Creative Assembly
[2011.05.20 19:06:53 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\The First Templar
[2010.12.31 16:11:05 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Ubisoft
[2011.06.24 13:18:43 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Unity
[2012.10.12 06:35:19 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\uTorrent
[2012.01.08 09:00:19 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Vodafone
[2011.06.03 16:35:35 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\WB Games
[2011.01.05 19:16:34 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Windows Live Writer
[2009.12.25 09:20:53 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Zoner
[2011.07.24 12:14:17 | 000,000,000 | ---D | M] -- C:\Users\pc\AppData\Roaming\Špidla Data Processing, s.r.o

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 05:53:46 | 000,032,618 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.12.17 12:42:51 | 000,000,960 | ---- | C] () -- C:\Windows\Tasks\Google Software Updater.job
[2010.03.16 20:04:32 | 000,000,936 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2010.03.16 20:04:32 | 000,000,940 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2011.07.04 09:03:27 | 000,000,396 | -H-- | C] () -- C:\Windows\Tasks\Norton Security Scan for pc.job
[2012.05.02 05:40:15 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.05.13 18:27:02 | 000,000,964 | ---- | C] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003Core.job
[2012.05.13 18:27:03 | 000,000,986 | ---- | C] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003UA.job
[2013.02.26 14:21:16 | 000,000,266 | ---- | C] () -- C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013.02.26 14:21:17 | 000,000,282 | ---- | C] () -- C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 05:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.06.21 06:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011.09.29 17:02:44 | 001,301,872 | ---- | M] (Microsoft Corporation) MD5=22F7E7CBCA308DEE3428B097D4F8A61C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_b38e8546e0cbe4a1\tcpip.sys
[2011.04.25 05:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010.11.20 13:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.09.29 17:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2011.09.29 16:43:37 | 001,285,488 | ---- | M] (Microsoft Corporation) MD5=56C198AC82EFA622DD93E9E43575F79C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_b2f8731bc7b62d86\tcpip.sys
[2010.04.09 08:16:33 | 001,289,096 | ---- | M] (Microsoft Corporation) MD5=5D6A83E928F22AF5AC9868B162FFAD0D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_b38009a0e0d5a32d\tcpip.sys
[2010.04.09 08:24:54 | 001,285,000 | ---- | M] (Microsoft Corporation) MD5=63170B9EE1D0EF0032F0408605671D1A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_b30e0d41c7a5fe2f\tcpip.sys
[2011.09.29 17:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\System32\drivers\tcpip.sys
[2011.09.29 17:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011.04.25 07:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2011.04.25 05:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2011.06.21 06:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2010.06.14 07:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2010.06.14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
[2011.06.21 06:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2012.10.03 17:44:01 | 001,308,040 | ---- | M] (Microsoft Corporation) MD5=D490DD0A91B4EAC3B4EE08D11EE37C31 -- C:\Windows\SoftwareDistribution\Download\ccb2ff3ce5106b48b42ea8885492f1e8\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_b5a428d6ddce3d9a\tcpip.sys
[2011.06.21 07:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys
[2012.10.03 17:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\SoftwareDistribution\Download\ccb2ff3ce5106b48b42ea8885492f1e8\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_b4ef7439c4d0da52\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< >

< %systemroot%*.* /U /s >
[11 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[66 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp files -> C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\012e116823830ecaadd90920283e19c1\*.tmp files -> C:\Windows\SoftwareDistribution\Download\012e116823830ecaadd90920283e19c1\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\01908309e5de9ade11b0ea22846a25f5\*.tmp files -> C:\Windows\SoftwareDistribution\Download\01908309e5de9ade11b0ea22846a25f5\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\072ac68bd92c1cab304440175bd4711a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\072ac68bd92c1cab304440175bd4711a\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\096dc7828a1ace10ae83f6c491f00348\*.tmp files -> C:\Windows\SoftwareDistribution\Download\096dc7828a1ace10ae83f6c491f00348\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution\Download\0b6b0b5fd3d627c1735ff9a79994ed40\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0b6b0b5fd3d627c1735ff9a79994ed40\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\0f3de01da2f86f43cc84809deb321990\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0f3de01da2f86f43cc84809deb321990\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\14e38c73770a757780349430ec09c787\*.tmp files -> C:\Windows\SoftwareDistribution\Download\14e38c73770a757780349430ec09c787\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\1a8b8edbac0b70df515610e7709d820b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1a8b8edbac0b70df515610e7709d820b\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\1b5013134247d6f55ebfd8e6ee88586b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1b5013134247d6f55ebfd8e6ee88586b\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\1f040353fe20b5fcd705684524962806\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1f040353fe20b5fcd705684524962806\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\1f044e796aa9c20e041e7c91efb2533b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1f044e796aa9c20e041e7c91efb2533b\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\22f68b5ef7bf5cff9d77869f81270cd0\*.tmp files -> C:\Windows\SoftwareDistribution\Download\22f68b5ef7bf5cff9d77869f81270cd0\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\264d2ec21701e4ee9dce889a808295f3\*.tmp files -> C:\Windows\SoftwareDistribution\Download\264d2ec21701e4ee9dce889a808295f3\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\2ca5f82ac396945b8fe215ec57f09f56\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2ca5f82ac396945b8fe215ec57f09f56\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\2cad6e43fc74572b78b64af2e2ca1968\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2cad6e43fc74572b78b64af2e2ca1968\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\2f7220db2a77c10a7515b000e32db266\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2f7220db2a77c10a7515b000e32db266\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\3a7300c5008ac341554fe78737cf38e3\*.tmp files -> C:\Windows\SoftwareDistribution\Download\3a7300c5008ac341554fe78737cf38e3\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\42d44537b6f25e162055eaec506fbf77\*.tmp files -> C:\Windows\SoftwareDistribution\Download\42d44537b6f25e162055eaec506fbf77\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\43dcaf3f4d4487d283d87c7a9ccc0c7c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\43dcaf3f4d4487d283d87c7a9ccc0c7c\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\44e1fa920b4c7554a6b4cfdcfb79ad91\*.tmp files -> C:\Windows\SoftwareDistribution\Download\44e1fa920b4c7554a6b4cfdcfb79ad91\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4562c2f4b44558259b77c4032ed108ce\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4562c2f4b44558259b77c4032ed108ce\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\48fd941a3baa949be28788d37c174362\*.tmp files -> C:\Windows\SoftwareDistribution\Download\48fd941a3baa949be28788d37c174362\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4c26a4f7f4157cb116cd4bd584f177c9\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4c26a4f7f4157cb116cd4bd584f177c9\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\4c56333f283359018f2761f9ca8a8f26\*.tmp files -> C:\Windows\SoftwareDistribution\Download\4c56333f283359018f2761f9ca8a8f26\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\54cd33f0e0bfb832ec03bdb9dc6ef329\*.tmp files -> C:\Windows\SoftwareDistribution\Download\54cd33f0e0bfb832ec03bdb9dc6ef329\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\597806ae7765e1681afa6c301e16754b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\597806ae7765e1681afa6c301e16754b\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\59dc4ec62b20946ea24185166d669624\*.tmp files -> C:\Windows\SoftwareDistribution\Download\59dc4ec62b20946ea24185166d669624\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\5ef94a4e1066680671a8ade3bbd001bd\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5ef94a4e1066680671a8ade3bbd001bd\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\622e294d53dbab40e6a37cda97b199d7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\622e294d53dbab40e6a37cda97b199d7\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\6304b3875884d4edc9d313cddbf2d60c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\6304b3875884d4edc9d313cddbf2d60c\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\67ac6f6079912b9e0c2571ab0c4cf935\*.tmp files -> C:\Windows\SoftwareDistribution\Download\67ac6f6079912b9e0c2571ab0c4cf935\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\6b53e6396d1d8299cb225c282f46b189\*.tmp files -> C:\Windows\SoftwareDistribution\Download\6b53e6396d1d8299cb225c282f46b189\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\6d76a6553d8b4633b5b4b7f676d0d23e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\6d76a6553d8b4633b5b4b7f676d0d23e\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\728908a388fca0f15b637b52373ad97e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\728908a388fca0f15b637b52373ad97e\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\74c103704cb3dbf01b246d3cdd30f297\*.tmp files -> C:\Windows\SoftwareDistribution\Download\74c103704cb3dbf01b246d3cdd30f297\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\7610a5052991c35af788c6c9bfeae2a2\*.tmp files -> C:\Windows\SoftwareDistribution\Download\7610a5052991c35af788c6c9bfeae2a2\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\774f43bd68702b7a9b358353f5146a7a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\774f43bd68702b7a9b358353f5146a7a\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\789964dc09c1e02ed5d01e6a0a200879\*.tmp files -> C:\Windows\SoftwareDistribution\Download\789964dc09c1e02ed5d01e6a0a200879\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\7a1cea83593ff2cfe6528dd1feba05c2\*.tmp files -> C:\Windows\SoftwareDistribution\Download\7a1cea83593ff2cfe6528dd1feba05c2\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\7b765838ffb2b23b5991c38b7f437a34\*.tmp files -> C:\Windows\SoftwareDistribution\Download\7b765838ffb2b23b5991c38b7f437a34\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\7e447a3f1c4c7a5679cd9cc1c4d6b4b7\*.tmp files -> C:\Windows\SoftwareDistribution\Download\7e447a3f1c4c7a5679cd9cc1c4d6b4b7\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\80a01a9b4f7e328462d22e9cbd9a9210\*.tmp files -> C:\Windows\SoftwareDistribution\Download\80a01a9b4f7e328462d22e9cbd9a9210\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8aa3a18ec1546aa52fbdb89300dd7e27\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8aa3a18ec1546aa52fbdb89300dd7e27\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8b919c863c7091339a00b9194e02f19e\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8b919c863c7091339a00b9194e02f19e\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8d4db7f00cd6a5e3216b14eda748d3b1\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8d4db7f00cd6a5e3216b14eda748d3b1\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8e4eda8a1a2a750d4cedcb26bf7482fc\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8e4eda8a1a2a750d4cedcb26bf7482fc\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\904b1ffde5e278a2a5a70cc995a798d2\*.tmp files -> C:\Windows\SoftwareDistribution\Download\904b1ffde5e278a2a5a70cc995a798d2\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\9a6ea917e96ca1f3e5f3d03337230855\*.tmp files -> C:\Windows\SoftwareDistribution\Download\9a6ea917e96ca1f3e5f3d03337230855\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\a033b955f7a2dcc852d6798f6b0b6d14\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a033b955f7a2dcc852d6798f6b0b6d14\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\a23ce5f61ea987d3d2cf6050f1211488\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a23ce5f61ea987d3d2cf6050f1211488\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\a60cddc5e431d9a0fc1061f1a8cc7ef8\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a60cddc5e431d9a0fc1061f1a8cc7ef8\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\a7397eff4f2a8fd8d0ae11fc28cb8862\*.tmp files -> C:\Windows\SoftwareDistribution\Download\a7397eff4f2a8fd8d0ae11fc28cb8862\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\abcf4839227f771ffd76e7fab6226806\*.tmp files -> C:\Windows\SoftwareDistribution\Download\abcf4839227f771ffd76e7fab6226806\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\ae24b55d0c856f112f76fff20dbed4bd\*.tmp files -> C:\Windows\SoftwareDistribution\Download\ae24b55d0c856f112f76fff20dbed4bd\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\af57edbd5341ca71e2afb9d3c83e5011\*.tmp files -> C:\Windows\SoftwareDistribution\Download\af57edbd5341ca71e2afb9d3c83e5011\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\bd8b34f597dcbc6473c5c80416e172fe\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bd8b34f597dcbc6473c5c80416e172fe\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\c1bfd24c8f71e2618087f201341ca808\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c1bfd24c8f71e2618087f201341ca808\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\c46526435527556d8a8e4082d49667e8\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c46526435527556d8a8e4082d49667e8\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\c8791b92a30551cff0a6adeda368401a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c8791b92a30551cff0a6adeda368401a\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\c967eaf8d393c2ef1f5c40f5f84b69f2\*.tmp files -> C:\Windows\SoftwareDistribution\Download\c967eaf8d393c2ef1f5c40f5f84b69f2\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\cbac3f05a0c4c823c9a9c5b53f768744\*.tmp files -> C:\Windows\SoftwareDistribution\Download\cbac3f05a0c4c823c9a9c5b53f768744\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\ce7fbe23a4213d1d0eefbe730b7c8e75\*.tmp files -> C:\Windows\SoftwareDistribution\Download\ce7fbe23a4213d1d0eefbe730b7c8e75\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\d3846432946a7af39de6c70a8462e0eb\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d3846432946a7af39de6c70a8462e0eb\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\d45f699c102a013462a1b7774a9a9f17\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d45f699c102a013462a1b7774a9a9f17\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\d6ac31152b603bc623a3051c62c13895\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d6ac31152b603bc623a3051c62c13895\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\e0b7f61d29bd472654d9e42fe183efea\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e0b7f61d29bd472654d9e42fe183efea\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\f3c298cee306a68b55b13b0503dce29f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\f3c298cee306a68b55b13b0503dce29f\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\f56ec4baecda28ccce876943cbfbf157\*.tmp files -> C:\Windows\SoftwareDistribution\Download\f56ec4baecda28ccce876943cbfbf157\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\fae9a14768880670e6cdd4dceb24111a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\fae9a14768880670e6cdd4dceb24111a\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\fd2c4f75402bd50a2310a9eb83dddd49\*.tmp files -> C:\Windows\SoftwareDistribution\Download\fd2c4f75402bd50a2310a9eb83dddd49\*.tmp -> ]
[10 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.12.14 18:54:19 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\.minecraft
[2013.02.13 15:19:22 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\.techniclauncher
[2012.09.02 19:50:43 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Adobe
[2012.09.25 13:33:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ahead
[2012.02.12 17:28:58 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Alawar Entertainment
[2010.12.02 07:33:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ankh - Heart of Osiris
[2011.10.22 10:49:11 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Artogon
[2012.12.30 17:34:39 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ashampoo
[2012.11.19 21:09:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Assassin's Creed III
[2013.02.01 14:04:45 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\ATI
[2012.02.05 09:29:38 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Bioshock
[2012.02.05 12:21:00 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Bioshock2
[2012.12.30 17:58:17 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Canneverbe Limited
[2011.12.26 19:48:47 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Canon
[2013.01.31 15:37:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Clickteam
[2011.07.26 18:29:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DAEMON Tools Lite
[2012.09.03 19:29:06 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DarknessII
[2012.12.24 18:13:01 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Day 1 Studios
[2011.08.04 08:59:09 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\DisneyInteractiveStudios
[2013.02.26 14:21:06 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\dll-files.com
[2013.02.27 11:32:16 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Doublefine
[2012.02.22 19:38:54 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\dvdcss
[2011.08.04 08:00:22 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\ERS G-Studio
[2013.02.09 13:43:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\ERS Game Studios
[2013.03.02 16:05:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Fatshark
[2011.12.30 11:34:08 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\FLEXnet
[2012.09.18 15:24:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\fltk.org
[2011.09.09 11:06:20 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\FreeArc
[2010.11.05 14:03:57 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Google
[2012.06.23 11:11:11 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Hamachi
[2010.11.26 15:47:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Hi-Rez Studios
[2011.08.16 13:58:10 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\HU2011
[2010.11.05 13:53:57 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Identities
[2011.08.29 11:46:50 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\InstallShield
[2011.11.25 16:55:00 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\IObit
[2013.03.01 11:08:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\JaiboGames
[2012.09.12 13:18:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Lionhead Studios
[2013.02.13 15:18:47 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\logs
[2010.03.16 20:21:29 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Macromedia
[2009.07.14 10:19:24 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Media Center Programs
[2012.02.03 14:00:23 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Media Player Classic
[2013.02.23 08:25:31 | 000,000,000 | --SD | M] -- C:\Users\Dannyv\AppData\Roaming\Microsoft
[2011.10.21 18:37:48 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Might & Magic Heroes VI
[2010.11.17 09:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade
[2011.09.06 12:55:50 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade Warband
[2011.09.05 13:20:50 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mount&Blade With Fire and Sword
[2010.11.05 13:57:32 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Mozilla
[2012.02.11 19:35:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\MusicNet
[2012.12.30 18:01:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\NCH Software
[2012.12.20 13:39:48 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Nero
[2010.11.30 12:19:09 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\OpenOffice.org
[2012.12.02 08:12:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Origin
[2012.10.28 08:43:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Publish Providers
[2011.10.15 09:16:44 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\PunkBuster
[2012.05.20 07:51:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Raptr
[2012.05.27 16:36:19 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Real
[2012.11.08 19:34:15 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Rovio
[2011.08.16 15:18:03 | 000,000,000 | RH-D | M] -- C:\Users\Dannyv\AppData\Roaming\SecuROM
[2013.03.04 18:41:05 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Skype
[2010.12.18 16:38:19 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\skypePM
[2012.10.28 08:56:10 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Sony
[2012.11.21 11:18:44 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Theta
[2013.01.01 10:28:32 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Touchstone
[2012.09.06 17:17:54 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\TS3Client
[2012.12.30 17:58:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\TuneUp Software
[2012.07.28 10:39:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Tunngle
[2012.06.27 18:02:51 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ubisoft
[2011.08.04 12:02:16 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Ulozto File Manager
[2012.04.06 18:26:59 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Unity
[2013.03.04 18:59:56 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\uTorrent
[2012.05.13 14:08:45 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\vlc
[2011.12.30 11:27:31 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Vodafone
[2012.09.07 21:24:28 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\wargaming.net
[2012.12.02 16:32:49 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Warner Bros. Interactive Entertainment
[2012.01.07 10:00:58 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\WB Games
[2010.11.17 07:44:04 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\WinRAR
[2013.01.02 12:14:03 | 000,000,000 | ---D | M] -- C:\Users\Dannyv\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2012.10.06 12:26:23 | 000,000,369 | ---- | M] () -- C:\Users\Dannyv\AppData\Roaming\83CA.exe
[2012.11.19 20:29:22 | 001,028,460 | ---- | M] () -- C:\Users\Dannyv\AppData\Roaming\Assassin's Creed III\Uninstall\unins000.exe
[2011.11.25 16:54:51 | 000,000,000 | ---- | M] () -- C:\Users\Dannyv\AppData\Roaming\Microsoft\Windows\Templates\Temp.exe
[2011.02.17 22:46:25 | 000,835,440 | ---- | M] () -- C:\Users\Dannyv\AppData\Roaming\PunkBuster\pbsetup\pbsvc.exe
[2012.08.12 18:56:03 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\temp\~Upg0\rnupgagent.exe
[2012.09.27 18:56:28 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\temp\~Upg1\rnupgagent.exe
[2012.12.14 15:59:41 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\temp\~Upg4\rnupgagent.exe
[2013.02.08 16:07:18 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\temp\~Upg5\rnupgagent.exe
[2012.09.27 18:56:28 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.20\agent\rnupgagent.exe
[2012.10.06 21:58:04 | 027,433,440 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.20\agent\stub_data\RealPlayer.exe
[2012.10.06 21:57:06 | 000,760,128 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.20\agent\stub_exe\RealPlayer.exe
[2012.12.14 15:59:41 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Users\Dannyv\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[10 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2013.03.04 18:48:03 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.02.27 14:24:43 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013.03.02 14:21:13 | 000,000,282 | ---- | M] () -- C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job
[2013.03.03 09:40:00 | 000,000,964 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003Core.job
[2013.03.04 18:40:01 | 000,000,986 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2498825763-850277669-1110203184-1003UA.job
[2013.03.04 14:31:00 | 000,000,960 | ---- | M] () -- C:\Windows\Tasks\Google Software Updater.job
[2013.03.04 19:06:00 | 000,000,936 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.03.04 19:06:07 | 000,000,940 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.02.05 14:27:47 | 000,000,396 | -H-- | M] () -- C:\Windows\Tasks\Norton Security Scan for pc.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2011.04.14 12:19:33 | 000,431,672 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[10 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.03.04 19:01:19 | 000,010,096 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.04 19:01:19 | 000,010,096 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 19:31:11 | 000,076,888 | ---- | M] () -- C:\Windows\system32\PnkBstrA.exe
[10 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ISUSPM" = "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler -- [2006.09.10 20:56:24 | 000,218,032 | ---- | M] (Macrovision Corporation)
"uTorrent" = "D:\Danny muzika\uTorrent.exe" /MINIMIZED -- [2012.12.11 08:38:45 | 000,969,104 | ---- | M] (BitTorrent, Inc.)
"Steam" = "C:\Program Files\Steam\steam.exe" -silent -- [2013.02.25 07:39:34 | 001,602,984 | ---- | M] (Valve Corporation)
"Zoner Photo Studio Autoupdate" = C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE -- [2012.12.04 17:20:52 | 000,773,728 | ---- | M] (ZONER software)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.12.13 11:44:43 | 000,917,984 | ---- | M] (Mozilla Corporation) MD5=9C376F42BDE37F18D0A39AF7415D9BE6 -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2010.11.20 13:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2013.02.21 06:23:46 | 001,274,320 | ---- | M] (Google Inc.) MD5=84F6D5FE968852C59BCD3E06A36DC356 -- C:\Program Files\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.03.04 19:05:53 | 000,000,512 | ---- | M] () MD5=03B5A23CD6D73FFA6D881F34630F7672 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2008.09.08 21:55:14 | 000,000,204 | ---- | M] () -- \Program Files\Image-Line\FL Studio 10\Plugins\Fruity\Effects\Hardcore\Presets\I cracked my Tube!.hdprg
[2010.01.15 21:56:40 | 000,000,272 | ---- | M] () -- \Program Files\Image-Line\FL Studio 10\Plugins\Fruity\Generators\Drumaxx\Drum Patches\Sound FX\Crack.dmpatch
[2010.01.15 21:56:40 | 000,000,272 | ---- | M] () -- \Program Files\Image-Line\FL Studio 10\Plugins\Fruity\Generators\DrumPad\Drum Patches\Sound FX\Crack.dmpatch
[2012.11.16 19:19:55 | 016,372,576 | ---- | M] () -- \Program Files\Ubisoft\Ubisoft Game Launcher\Uplay_Cracked.exe
[2012.12.10 19:52:22 | 000,000,478 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\Microsoft\Office\Naposledy otevřené\Crackme.LNK
[2012.05.13 12:49:41 | 000,013,390 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\3DMGAME-Nexuiz.Crack.Fixed.Full.Rip-3DM.torrent
[2012.08.30 15:55:00 | 000,014,418 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\3DMGAME-The.Walking.Dead.EP1-2.Cracked.Full.Rip-3DM.torrent
[2011.08.17 08:29:54 | 000,033,509 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Assassins Creed 2+crack,emulator,cestina.torrent
[2012.11.20 15:39:14 | 000,039,652 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.1.torrent
[2012.11.19 14:05:22 | 000,039,653 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Assassins.Creed.3.Cracked-P2P.torrent
[2013.02.21 06:54:47 | 000,000,788 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Assassins.Creed.3.The.Tyranny.of.King.Washington.The.Infamy.DLC.Crack.Only-RELOADED.torrent
[2012.09.28 14:46:28 | 000,020,643 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Bad.Piggies.v1.0.0.cracked-THETA.torrent
[2011.10.26 09:04:13 | 000,010,617 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Battlefield.3.CRACK.ONLY-RELOADED.rar.torrent
[2011.12.20 06:51:41 | 000,017,716 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Call of Duty MW3 MP Crack Package.rar.torrent
[2011.10.15 09:17:36 | 000,014,652 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Crack.torrent
[2012.08.27 08:34:54 | 000,001,410 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Dark Souls Prepare to Die Edition Crack Only - FLT.rar.torrent
[2011.09.09 13:23:50 | 000,011,039 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Dead Island DLC + CRACK MULTI.torrent
[2011.08.17 15:20:47 | 000,001,806 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\From Dust Crack by SKIDROW.torrent
[2011.08.17 15:22:16 | 000,014,697 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\From.Dust.[PC].[Crack+Keygen].2011.torrent
[2012.06.08 18:06:54 | 000,019,713 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Kingdoms.of.Amalur.Reckoning.v1.0.cracked.READ.NFO-THETA.torrent
[2012.06.24 19:51:22 | 000,006,204 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\LEGO.Batman.2.DC.Super.Heroes-RELOADED.Crack.Only.torrent
[2012.09.04 13:38:09 | 000,019,278 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Minecraft Crack.rar.torrent
[2011.09.14 14:24:48 | 000,041,742 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Red Orchestra 2 Heroes Of Stalingrad STEAM CRACKED-3DM.torrent
[2011.08.30 17:34:46 | 000,007,106 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\rld_crack.torrent
[2012.02.29 15:12:15 | 000,014,237 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Saints.Row.The.Third-SKIDROW CRACK ONLY.torrent
[2012.05.20 17:25:33 | 000,008,030 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\THE WITCHER 2 CRACK SKIDROW.rar.torrent
[2013.02.26 11:57:46 | 000,007,310 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\The_Elder_Scrolls_V_Skyrim-Razor1911 - CRACK ONLY.torrent
[2011.07.17 17:05:34 | 000,040,882 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]Arcania_Gothic4_crack.torrent
[2011.07.17 16:56:17 | 000,014,567 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]Arcania_Gothic_4_crack_Skidrow_.torrent
[2011.07.17 17:00:02 | 000,014,780 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]Arcania_Gothic_4_RELOADED_CRACK_ONLY.torrent
[2011.07.17 16:55:14 | 000,019,343 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]Arcania_Gothic_4_update_1_1_0_crack.torrent
[2011.05.27 13:18:19 | 000,003,515 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]DiRT_3_crack-1.torrent
[2011.05.27 13:19:54 | 000,000,911 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]DiRT_3_Crack-2.torrent
[2011.05.27 13:18:04 | 000,000,911 | R--- | M] () -- \Users\pc\AppData\Local\Temp\[CzT]DiRT_3_Crack.torrent
[778 \Users\pc\AppData\Local\Temp\*.tmp files -> \Users\pc\AppData\Local\Temp\*.tmp -> ]
[2011.05.30 16:03:33 | 000,000,611 | ---- | M] () -- \Users\pc\AppData\Roaming\Microsoft\Windows\Recent\Crack (2).lnk
[2011.07.18 06:48:53 | 000,000,578 | ---- | M] () -- \Users\pc\AppData\Roaming\Microsoft\Windows\Recent\Crack-Arcania-gothic-4.lnk
[2011.07.19 11:24:19 | 000,000,675 | ---- | M] () -- \Users\pc\AppData\Roaming\Microsoft\Windows\Recent\Crack.lnk
[2011.07.03 16:45:52 | 000,001,198 | ---- | M] () -- \Users\pc\AppData\Roaming\Microsoft\Windows\Recent\Návod na instalaci cracku a cd-keye.lnk
[2011.03.31 14:33:21 | 000,015,491 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\ACBcrack.rar.1.torrent
[2011.03.16 14:17:48 | 000,015,491 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\ACBcrack.rar.torrent
[2011.06.17 13:12:46 | 000,002,719 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Alice Madness Returns Crack by SKIDROW.torrent
[2011.06.18 09:42:18 | 000,005,325 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Alice.Madness.Returns.Crackfix-SKIDROW.torrent
[2011.05.27 17:14:16 | 000,017,377 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Aliens vs Predator MP CRACK v.1.2.17.rar.1.torrent
[2011.05.27 16:39:51 | 000,017,378 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Aliens vs Predator MP CRACK v.1.2.17.rar.torrent
[2011.07.17 17:05:34 | 000,040,882 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Arcania Gothic4 + crack.torrent
[2011.07.17 17:00:02 | 000,014,780 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Arcania.Gothic.4-RELOADED-CRACK ONLY.rar.torrent
[2011.03.18 20:28:06 | 000,035,995 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed Brotherhood [CRACK + KeyGen].torrent
[2011.06.03 12:37:50 | 000,014,687 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassins Creed Brotherhood Update v1.03 CZ + Crack 1.03.torrent
[2011.05.30 15:58:46 | 000,000,616 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Batman Arkham Asylum - CRACK Reloaded.rar.torrent
[2009.10.27 17:36:06 | 000,152,989 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\CALL OF DUTY 2 PC DVD + Key + 1.3 Patch + NoCd Crack.torrent
[2011.05.27 13:18:19 | 000,003,515 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\DiRT 3 crack.rar.torrent
[2011.01.24 20:06:26 | 000,005,396 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Gothic 4 crack.rar.torrent
[2011.05.26 13:17:38 | 000,001,998 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\NFS HP 2010_Crack.rar.1.torrent
[2011.04.10 11:02:29 | 000,001,999 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\NFS HP 2010_Crack.rar.torrent
[2011.06.28 15:00:08 | 000,006,376 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\star wars tfu.crack+cz.torrent
[2011.05.20 17:52:39 | 000,001,062 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\The Witcher 2 Assassins of Kings CLONEDVD - Crack.rar.torrent
[2011.05.20 18:00:11 | 000,003,270 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\The Witcher 2 Assassins of Kings Crack by SKIDROW.torrent
[2011.06.14 17:04:30 | 000,008,029 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\THE WITCHER 2 CRACK SKIDROW.rar.1.torrent
[2011.05.20 16:56:32 | 000,008,029 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\THE WITCHER 2 CRACK SKIDROW.rar.torrent
[2011.05.20 18:04:59 | 000,008,173 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\The Witcher 2 crack.rar.torrent
[2011.05.20 16:52:11 | 000,000,982 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\The.Witcher.2.Assassins.of.Kings.Crack-NoGRP.torrent
[2011.06.13 16:11:24 | 000,001,162 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\wrc 2010 no dvd crack.rar.torrent
[2011.06.30 18:16:06 | 000,011,367 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Zaklinac patch+CZ+crack.rar.torrent
[2010.10.18 19:17:55 | 003,137,256 | ---- | M] () -- \Users\pc\Music\Stone Temple Pilots\Core\11 Crackerman.wma

< *keygen* /s >
[2011.08.17 15:22:16 | 000,014,697 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\From.Dust.[PC].[Crack+Keygen].2011.torrent
[2012.06.12 15:59:00 | 000,015,146 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\Nero 7 Premium 7.8.5.0 CZ + keygen.rar.torrent
[2011.03.22 18:21:27 | 000,001,935 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] Assassins Creed Brotherhood keygen RELOADED.exe.log
[2011.04.03 15:35:17 | 000,001,592 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] keygen.exe.log
[2011.03.17 17:39:00 | 000,001,448 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed - Brotherhood KeyGen by Razor1911.rar.1.torrent
[2011.03.18 07:08:46 | 000,001,448 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed - Brotherhood KeyGen by Razor1911.rar.2.torrent
[2011.03.20 16:13:42 | 000,001,440 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed - Brotherhood KeyGen by Razor1911.rar.3.torrent
[2011.03.22 18:32:42 | 000,001,448 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed - Brotherhood KeyGen by Razor1911.rar.4.torrent
[2011.03.17 16:12:59 | 000,001,450 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed - Brotherhood KeyGen by Razor1911.rar.torrent
[2011.03.18 20:28:06 | 000,035,995 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassin's Creed Brotherhood [CRACK + KeyGen].torrent
[2011.03.22 18:20:45 | 000,000,980 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Assassins Creed Brotherhood keygen RELOADED.torrent
[2011.04.18 13:34:26 | 000,010,138 | ---- | M] () -- \Users\pc\AppData\Roaming\uTorrent\Mafia II Keygen.exe.torrent

< *loader* /s >
[2011.08.24 07:35:10 | 000,819,200 | ---- | M] () -- \Program Files\BearShare Applications\BearShare\BerkeleyLoader.dll
[2011.08.24 07:35:10 | 003,552,808 | ---- | M] () -- \Program Files\BearShare Applications\BearShare\ImageUploader5.ocx
[2007.03.12 12:48:46 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2011.04.28 17:35:42 | 000,000,147 | ---- | M] () -- \Program Files\Common Files\Blizzard Entertainment\BlizzardDownloader.ini
[2010.03.24 20:12:34 | 000,249,680 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2010.03.24 20:12:34 | 000,018,264 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2009.03.18 05:37:30 | 000,023,757 | ---- | M] () -- \Program Files\FreeArc\bin\gdk-pixbuf-query-loaders.exe
[2009.03.18 05:51:04 | 000,003,614 | ---- | M] () -- \Program Files\FreeArc\etc\gtk-2.0\gdk-pixbuf.loaders
[2009.06.04 12:20:42 | 000,028,560 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2009.06.04 12:20:42 | 000,027,492 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2009.06.04 12:20:42 | 000,041,827 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2009.06.04 12:20:42 | 000,020,750 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2009.06.04 12:20:42 | 000,027,004 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2009.06.04 12:20:42 | 000,033,364 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2009.06.04 12:20:42 | 000,021,329 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2009.06.04 12:20:42 | 000,035,326 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2009.06.04 12:20:44 | 000,023,528 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2009.06.04 12:20:44 | 000,018,354 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2009.06.04 12:20:44 | 000,023,858 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2009.06.04 12:20:44 | 000,028,334 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2009.06.04 12:20:44 | 000,017,895 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2009.06.04 12:20:44 | 000,023,851 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2009.06.04 12:20:44 | 000,041,060 | ---- | M] () -- \Program Files\FreeArc\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2011.08.24 07:35:10 | 000,819,200 | ---- | M] () -- \Program Files\iMesh Applications\iMesh\BerkeleyLoader.dll
[2011.08.24 07:35:10 | 003,552,808 | ---- | M] () -- \Program Files\iMesh Applications\iMesh\ImageUploader5.ocx
[2011.10.17 13:10:26 | 000,071,528 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2011.11.06 10:09:52 | 000,083,816 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2010.02.17 05:44:10 | 000,006,308 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2010.03.16 20:50:44 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.02.17 12:37:14 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2010.03.16 20:50:54 | 000,029,696 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.02.18 02:06:56 | 000,003,872 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2012.12.09 12:48:46 | 000,329,056 | ---- | M] () -- \Program Files\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2012.12.09 12:48:47 | 000,294,400 | ---- | M] () -- \Program Files\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2010.03.15 10:28:24 | 000,045,056 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2012.11.16 10:52:36 | 000,432,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSPluginLoader.exe
[2012.10.18 16:47:30 | 000,442,368 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSPluginLoader.exe
[2012.11.16 12:39:34 | 000,193,024 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPluginLoader.exe
[2012.12.04 17:20:18 | 000,103,520 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\8bfLoader.exe
[2012.12.04 17:20:32 | 000,017,504 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\WICLoader.exe
[2013.02.21 06:57:02 | 000,133,632 | ---- | M] () -- \ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{C39A71CB-7906-13D7-A840-8E8BD32714F5}-ubiorbitapi_r2_loader.dll
[3 \ProgramData\Microsoft\Windows\WER\ReportArchive\*.tmp files -> \ProgramData\Microsoft\Windows\WER\ReportArchive\*.tmp -> ]
[2012.07.26 22:47:04 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2011.12.15 18:20:59 | 000,007,715 | ---- | M] () -- \ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2011.12.15 18:20:59 | 000,000,319 | ---- | M] () -- \ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2012.12.04 17:00:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.12.04 17:00:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.12.04 17:00:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.02.21 06:57:02 | 000,133,632 | ---- | M] () -- \Users\All Users\Microsoft\Microsoft Antimalware\LocalCopy\{C39A71CB-7906-13D7-A840-8E8BD32714F5}-ubiorbitapi_r2_loader.dll
[3 \Users\All Users\Microsoft\Windows\WER\ReportArchive\*.tmp files -> \Users\All Users\Microsoft\Windows\WER\ReportArchive\*.tmp -> ]
[2012.07.26 22:47:04 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2011.12.15 18:20:59 | 000,007,715 | ---- | M] () -- \Users\All Users\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2011.12.15 18:20:59 | 000,000,319 | ---- | M] () -- \Users\All Users\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2012.12.04 17:00:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.12.04 17:00:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012.12.04 17:00:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.03.04 16:41:28 | 000,000,753 | ---- | M] () -- \Users\Dannyv\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UCOG1YA\AdLoader[1].htm
[2013.03.02 13:40:58 | 000,105,903 | ---- | M] () -- \Users\Dannyv\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PGH4DF30\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2012.11.03 14:22:53 | 000,019,488 | ---- | M] () -- \Users\Dannyv\AppData\Roaming\uTorrent\zrodenie_planety_opic_frogeruploader_rip.m4v.torrent
[2011.06.01 13:44:14 | 000,000,723 | ---- | M] () -- \Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.3.0.1_0\img\ajax-loader.gif
[2011.06.01 13:44:14 | 000,001,062 | ---- | M] () -- \Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.3.0.1_0\js\FMLoader_Obfs.js
[2010.09.22 13:16:48 | 000,005,273 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Toolbar\Applications\loader.xap
[2010.11.03 10:01:26 | 000,000,402 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\19X881XF\preloader[1].htm
[1 \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\19X881XF\*.tmp files -> \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\19X881XF\*.tmp -> ]
[2011.03.09 15:07:59 | 000,018,453 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\5AX7O5D8\FeatureLoader.js[2].php
[2011.01.12 15:40:04 | 000,000,847 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ASWLW80B\ajax-loader[1].gif
[2011.01.23 19:25:06 | 000,215,799 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ASWLW80B\wl_setup_6.0.0_20101220_downloader[1].exe
[2011.03.09 15:07:58 | 000,001,330 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E80EBGCQ\ContentLoader[2].js
[2011.07.03 13:18:10 | 000,003,881 | ---- | M] () -- \Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E80EBGCQ\facemoodsLoader[2].js
[2011.01.13 17:45:13 | 001,606,292 | ---- | M] () -- \Users\pc\AppData\Local\Temp\ProjectBlackout_Downloader.exe.log
[2010.07.15 14:58:43 | 000,632,948 | ---- | M] () -- \Users\pc\AppData\Local\Temp\SnowboundDownloader_EN_v2.51_25022010.exe.log
[2010.09.09 14:20:09 | 000,000,879 | ---- | M] () -- \Users\pc\AppData\Local\Temp\Stan Helsing-1000Mb-Pahyl.of.sMs.Uploaders.rar
[778 \Users\pc\AppData\Local\Temp\*.tmp files -> \Users\pc\AppData\Local\Temp\*.tmp -> ]
[2011.01.04 20:58:20 | 001,997,312 | ---- | M] () -- \Users\pc\AppData\Local\Temp\Raptr\ProjectBlackout_Downloader.exe
[2010.12.09 05:49:08 | 000,156,760 | ---- | M] () -- \Users\pc\AppData\Local\Temp\Raptr\wolfteam_us_downloader.exe
[2011.07.15 07:12:26 | 000,000,151 | ---- | M] () -- \Users\pc\AppData\Roaming\Logia\eSnipsDownloaderLog.txt
[2010.04.05 06:10:42 | 000,000,060 | ---- | M] () -- \Users\pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\M6SGAXRR\miniclip.com\games\bubble-trouble\en\bubbletrouble.swf\MiniclipLoaderAd.sol
[2010.03.21 17:00:57 | 000,000,060 | ---- | M] () -- \Users\pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\M6SGAXRR\miniclip.com\games\bush-royal-rampage\en\bushroyalrampage.swf\MiniclipLoaderAd.sol
[2010.03.21 16:58:37 | 000,000,060 | ---- | M] () -- \Users\pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\M6SGAXRR\porse.cz\Online_hry\bush_Royal_Rampage.swf\MiniclipLoaderAd.sol
[2011.02.27 18:08:19 | 000,000,060 | ---- | M] () -- \Users\pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\M6SGAXRR\superhry.cz\HSO_40e1f9z\bushroaylits.swf\MiniclipLoaderAd.sol
[2011.04.28 18:20:33 | 000,001,725 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] BackgroundDownloader.exe.log
[2011.04.28 12:55:34 | 000,001,706 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] Blizzard Downloader.exe.log
[2011.05.22 11:58:31 | 000,001,628 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] CF_Downloader.exe.log
[2011.05.22 11:58:31 | 000,001,719 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] crossfire_downloader.exe.log
[2011.01.13 18:02:27 | 000,001,997 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] ProjectBlackout_Downloader.exe.log
[2011.04.28 16:35:42 | 000,001,933 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] wow-2.1.1.1897-enGB-tools-downloader.exe.log
[2011.04.28 17:00:33 | 000,001,637 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] wow-4.1.0.2317-enUS-tools-downloader.exe.log
[2011.04.28 16:37:04 | 000,001,946 | ---- | M] () -- \Users\pc\AppData\Roaming\Raptr\LTC\[help] WoW-x.x.x.x-4.0.0.12911-EU-Downloader.exe.log
[2011.05.25 15:51:56 | 000,019,968 | ---- | M] () -- \Users\pc\Desktop\Bus Driver\lib\loaders.dll
[2013.01.04 05:43:53 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\99a6139019de239b5d14b042d6243282\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:39:49 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\99a6139019de239b5d14b042d6243282\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:40:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\99a6139019de239b5d14b042d6243282\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\99a6139019de239b5d14b042d6243282\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[10 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2011.06.10 14:42:32 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2011.04.26 07:07:16 | 000,009,622 | ---- | M] () -- \Windows\System32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr
[2009.07.14 05:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009.07.14 09:43:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 09:43:57 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2009.07.14 09:43:57 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2011.09.09 05:41:54 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2011.09.09 05:41:54 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2011.09.09 05:41:54 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 03:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.14 09:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 02:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.08.19 08:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009.08.19 08:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2010.11.20 04:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 02:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 07:22:35 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_0ad4ff55dce9d030\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.02 06:45:50 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_0ac72e8bdcf4a01c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 06:50:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 07:13:36 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 06:47:28 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_0caf8c25da193eb6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:15:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:56:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_0d3159e2f33c4676\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Files - Unicode (All) ==========
[2011.11.25 17:00:06 | 000,000,650 | ---- | M] ()(C:\Users\Dannyv\AppData\Local\PMB Fik?s) -- C:\Users\Dannyv\AppData\Local\PMB Fik聥s
[2011.11.25 17:00:06 | 000,000,650 | ---- | C] ()(C:\Users\Dannyv\AppData\Local\PMB Fik?s) -- C:\Users\Dannyv\AppData\Local\PMB Fik聥s
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\«????»3DM???????) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\《死亡竞技》3DM完整破解硬盘版
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\«????»???3DM?????) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\《行尸走肉》第二章3DM破解硬盘版

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT

< End of report >

OTL Extras logfile created on: 4.3.2013 19:03:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dannyv\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 64,64% Memory free
6,50 Gb Paging File | 4,95 Gb Available in Paging File | 76,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 17,66 Gb Free Space | 18,08% Space Free | Partition Type: NTFS
Drive D: | 360,28 Gb Total Space | 100,14 Gb Free Space | 27,79% Space Free | Partition Type: NTFS

Computer Name: PC-PC | User Name: Dannyv | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2498825763-850277669-1110203184-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00394F67-5074-45EA-9263-E682A451A7C4}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{11EB2435-0AA6-4252-8E99-52B82FAE02E3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1FA458A4-3F28-4627-94BB-2EC3728A857B}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{288FAEB0-67C6-4662-AA4B-65135C97D04C}" = rport=138 | protocol=17 | dir=out | app=system |
"{2AA416A5-010D-49FB-8179-09B4F0C4D990}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{30631A7D-8376-4019-88F1-B3A3BA0269FE}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{4636C61F-DD4E-4D4D-9091-11CA43DC8764}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{4A9AB86D-CCC9-4251-81C4-78C8C9830DBA}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{576439BB-42CD-4A03-8CAD-EE9F71029A58}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{63585791-7B6B-4143-AE04-85FC79A31806}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{6DA038C1-CC70-4634-B606-D2D5EC53C9E7}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6E6D2B3B-8047-4B05-ADBA-846A756F9646}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{74FD4130-2473-4038-879C-CF73BD339589}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{754618D8-148F-4C55-8FDC-831534B93D7F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{78B0E0BD-A6D6-446A-873C-A695CD17C0F6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{78D6E6E1-F16B-4991-9BA1-D36EFFEE0D27}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{7D23036B-6DA7-4F93-B815-686BA6827583}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{8D61C386-A704-408B-B95C-10D8DAF7C487}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{93C5783D-46F3-4850-B7C8-0457C4FF2024}" = rport=139 | protocol=6 | dir=out | app=system |
"{968E896F-8941-4A5A-858F-71415FA3A1F0}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{995B023C-16D0-429A-B282-CA0036B64D09}" = rport=10243 | protocol=6 | dir=out | app=system |
"{99C19F3E-47BB-4CC9-8660-8D3DFDEFDF14}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{9FD28865-6CB8-49AB-A9A4-D9D8A44452D5}" = lport=138 | protocol=17 | dir=in | app=system |
"{B1A1123A-8CA6-40E9-8099-56901E246C35}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{BD4E37BA-8112-49E7-B90D-404401779ADB}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{BE4185D6-B53F-43D0-84F4-1846B77B7791}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{C73EDE33-8189-4E03-B23B-42A76BF840C3}" = rport=137 | protocol=17 | dir=out | app=system |
"{C7A4AB57-EA1B-400C-919D-50024584FBFB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{CDCDF111-6659-432F-9A38-DB9DF7E26501}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D081CBC5-8045-4E06-989A-B647485D55D0}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{D5DA5ED3-C1E8-4EAA-9D11-BF2BA685CEB9}" = lport=137 | protocol=17 | dir=in | app=system |
"{D79CA9DE-DB94-4A67-BC08-6C8808B7104A}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DBA36558-6CB1-4CA2-8CA4-67D30AB2AD65}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E0CB2565-F382-4336-BAD7-1084251055C6}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E140781D-0303-484C-BE3E-78348AB77A47}" = rport=445 | protocol=6 | dir=out | app=system |
"{E561D8A9-5276-4B38-872B-BF872D65B38A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E99D9879-89DF-478E-9EA9-312B63D3D2F9}" = lport=139 | protocol=6 | dir=in | app=system |
"{EAE01A88-DDAF-4CF6-8F73-36FE92538EE5}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F8470065-720A-45AC-A7E9-BAF15562A5FA}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{FC80A52F-8B91-4027-A74A-EFDD43DFE261}" = lport=445 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0AF92857-604C-4F23-83D9-4A4BF615179C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0DBDAEFD-DA3D-4461-933D-A3B687B16CEE}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{1346BB37-2724-4B7C-93C9-19091C30D129}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{149041C0-DB70-40A4-9CB1-2B594446FF3A}" = protocol=6 | dir=out | app=system |
"{181E4080-B1AC-47EB-B1A8-41CF589EF246}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{1AB2A3DD-82BD-4846-961A-AAB18EE290A8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1B24D0BE-CE4B-4A85-B6B2-0DD39EF64D2E}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{1CF8C89C-CBE3-4FA8-8BFC-7464E9C43241}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{1D03FC6D-563C-4609-864D-5E93BA45CAE7}" = protocol=6 | dir=in | app=c:\program files\red sky\downtango\downtango.exe |
"{1D13818C-8C56-4DAE-BF92-ABD2CD2A5529}" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe |
"{1EAC38D9-3E75-4976-9FD9-C62EA0C918FC}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{26CC6EAA-E22A-409F-8595-B55FF88470E5}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{29BADB58-E240-4CB5-8744-D5E0459D461B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2C76F207-3CE8-43A0-AB00-889A70FC2B8C}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{2CB1707C-1A4C-406E-97DC-5E1C18F7797D}" = protocol=17 | dir=in | app=d:\cf\crossfire\cf_g4box.exe |
"{306A0841-70BA-4D5B-8BDA-42CF1BCA1537}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{347347CD-804F-4A1B-8DE7-0383B91F7ADE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{39278C6A-ACDB-452E-B3B0-35298A195576}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3D1B8F51-1F14-432F-A3DF-D55993F3A587}" = protocol=6 | dir=in | app=d:\borderlands 2\binaries\win32\borderlands2.exe |
"{41C36DF3-BC56-4FCD-8633-3EDD2FA15790}" = protocol=6 | dir=in | app=c:\program files\red sky\downtango\pyload-dist\pyloadcore.exe |
"{42BE1C2C-17D5-4878-869E-CD4572936AFA}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{44250D16-39BD-467D-8C53-B399A8B64FFD}" = protocol=17 | dir=in | app=d:\cf\crossfire\cf_g4box.exe |
"{4529A119-15F1-4B5E-8DA1-A88FDA08FD13}" = dir=in | app=c:\users\dannyv\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{494842B5-7DBD-4630-A72B-2B7B2198C2A6}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{4BCA2297-9EA9-4F8D-996D-F5AE883363BB}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{4DEC3D0A-6E93-45C5-99A3-FC53CAC31B48}" = protocol=6 | dir=in | app=d:\danny muzika\launcher\launcher.exe |
"{4E57962E-C39D-443C-AA48-2767C8FD9C94}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{4E8DAB4F-780B-46A4-B79F-5FF396FEC84E}" = protocol=6 | dir=in | app=d:\rockstar games social club\rgsclauncher.exe |
"{4FCAF0D8-5404-46F1-A246-E2798CBEE658}" = protocol=17 | dir=in | app=d:\danny muzika\utorrent.exe |
"{4FEDE47D-EB9C-4628-BFA0-1B217B8A1CD5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{5018D94D-B142-4B13-B40E-ABA60EE57088}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\mediabar\datamngr\toolbar\dtuser.exe |
"{51311EED-AC6E-4DC1-84C9-1F7D52D1ED8F}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{53C9A5AB-7EE7-454B-B23C-5D1C77A0B09A}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{5A2A9507-571F-408F-BFBF-9A072850EF9C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5B270A13-873E-46E4-9CBB-7DA98B34C3B6}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{66ADC0ED-716B-4272-80D8-22AD9344CEE7}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{6B6A189D-2A52-46CA-A07F-4F76CC9C241B}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{6EA8C0FF-2A62-43FB-BC20-73C46CD461AC}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{7407BD86-2877-40AB-B1CA-E2BCB4B0B1BF}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{742EE2F0-DCCE-4FD8-84AD-CDB4E1AB6668}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{743A2DD6-10AD-45A8-B5CF-C9CD8880C494}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7469F152-3D2B-4E48-A31F-61AFF62BD162}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{758EA6F3-751B-40A7-858E-FA6590DA2848}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{75DD192A-8467-4E85-AFE0-51030254A7E5}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{776E9805-CAFA-4E13-BE0E-3EC7F3F0C9F9}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{808B3B2A-A70E-4B6D-82B3-D33DC214A5FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{87A18FA2-1495-41CF-AE45-0F8837B852F4}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{898D4420-47B7-4025-9901-2A133F11E708}" = protocol=6 | dir=in | app=d:\chivalry medieval warfare\binaries\win32\udk.exe |
"{8A334157-30B0-4F84-8850-ED396B6DE6FC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8C86231B-E6A9-4612-8EBE-35F26843DF5C}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{92D0B177-5AEF-4A79-BF04-354B8362CA6F}" = protocol=17 | dir=in | app=d:\rockstar games social club\rgsclauncher.exe |
"{95201315-593E-4B6E-B7AC-358FCE03F11F}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{97F22D77-C308-45BC-958A-A22C8C57E8B7}" = protocol=17 | dir=in | app=d:\rockstar games social club\rgsclauncher.exe |
"{98A6AD4D-4C2D-4389-91F3-D2580D460412}" = protocol=17 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe |
"{9C3D8481-0C5C-46DA-BFCA-1A4F6C175C2E}" = protocol=6 | dir=in | app=d:\cf\crossfire\cf_g4box.exe |
"{A18D8B3F-D8E0-4E30-B716-A1DBE42B4A3B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{A32B92CB-9011-4868-BE14-7D98CF57F31F}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{A33409E9-4617-45E6-9C3B-AE0BCA103057}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{A770FE4B-E8F2-4409-872B-D096BD090DFE}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe |
"{A9E163B7-0235-4657-A7F9-2D84C41EA4E4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B1627791-F021-4466-8277-A2739C056647}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{B39ADE3D-E908-4651-A420-CF65A6A63EEB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{B5BD3D6C-9198-4C62-B304-A017951A341E}" = protocol=17 | dir=in | app=c:\program files\red sky\downtango\pyload-dist\pyloadcore.exe |
"{B6982B57-DA7A-42D0-BE9D-46267C4B84B2}" = protocol=17 | dir=in | app=d:\chivalry medieval warfare\binaries\win32\udk.exe |
"{B6F3FED3-5E6C-4763-AEF7-0728CAD524A9}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{BDD041F6-6161-447C-A463-7A40300643AF}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{BE951F78-A4FC-4F66-BC79-F2B83D6007DC}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{BEDEEE0C-D179-436A-9216-D90F72E74097}" = protocol=6 | dir=in | app=c:\program files\imesh applications\mediabar\datamngr\toolbar\dtuser.exe |
"{BF8BE0C9-AC13-49B0-9871-ED313843BE6C}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{C1806AD9-75E0-4997-8400-74978A27F13A}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe |
"{C3F89A46-E660-4A5A-8AA8-917D46C4D892}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{C4A5F4B9-23D3-46F7-9189-A5FE105113A3}" = protocol=17 | dir=in | app=d:\danny muzika\launcher\launcher.exe |
"{C6304F14-B454-4682-9328-2E589190458C}" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe |
"{C6A9DA6A-3F59-46CC-9AD1-892CA0EC768F}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\mediabar\datamngr\toolbar\dtuser.exe |
"{CE878FCA-A41B-4545-8F46-D178BCF794E2}" = protocol=6 | dir=in | app=d:\danny muzika\crossfire\cf_g4box.exe |
"{D3D91397-A4A0-4EAA-AAA6-87300ED156A8}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{D7CDAF55-D554-42E6-BC14-45F3ED37877B}" = protocol=17 | dir=in | app=d:\borderlands 2\binaries\win32\borderlands2.exe |
"{DAD2D560-5DFF-4EA0-8167-9680423E3C84}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E27B8465-3240-421F-B2F5-9FCA46E7E0D9}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{E3E9A2A8-DA32-461A-BBC3-B01E2E914096}" = protocol=17 | dir=in | app=c:\program files\red sky\downtango\downtango.exe |
"{E9AFEE3C-5B2F-4EC7-B74B-BF16FAFE041E}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{EC2C483F-604A-475D-8970-3EA6D09A0E5C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{F242D7FF-AFB0-4E0B-BE98-DA07BAF752E1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F558439A-DC4E-42F8-B3E4-D2BFADD36EA8}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{F7C25F23-DDCF-4246-BC24-75E8292E4590}" = protocol=17 | dir=in | app=c:\program files\imesh applications\mediabar\datamngr\toolbar\dtuser.exe |
"{F8898AF6-2CD5-447D-AE3E-5E522E85F5F9}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{F910A483-DD1A-4458-B7F6-ED95CF731F24}" = protocol=6 | dir=in | app=c:\program files\imesh applications\imesh\imesh.exe |
"{F9179075-9784-490B-855E-02C439B25848}" = protocol=17 | dir=in | app=d:\danny muzika\crossfire\cf_g4box.exe |
"{F9C6A67B-6237-4D79-9BF7-F4A11BC05014}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{FA1111F5-EA68-4790-97ED-259332EB2F01}" = protocol=6 | dir=in | app=d:\danny muzika\utorrent.exe |
"{FC1C82AE-772A-457B-AA72-E284824D03D4}" = protocol=6 | dir=in | app=d:\rockstar games social club\rgsclauncher.exe |
"{FDB5F3B7-203F-4267-9992-3D7865DFAD56}" = protocol=6 | dir=in | app=d:\cf\crossfire\cf_g4box.exe |
"{FFE7FE8E-18B4-46F0-9FF7-C2BC2C89DCCD}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"TCP Query User{10A7A969-0408-4E43-8814-BF0AF60D448D}C:\program files\roger wilco\roger.exe" = protocol=6 | dir=in | app=c:\program files\roger wilco\roger.exe |
"TCP Query User{17B1FBE9-3648-48E3-BA7D-7EE8CFA13575}D:\gh world tour\ghwt (2).exe" = protocol=6 | dir=in | app=d:\gh world tour\ghwt (2).exe |
"TCP Query User{3E8855BF-D664-4EAA-8C86-FD1B4E16CA80}D:\vlc\vlc.exe" = protocol=6 | dir=in | app=d:\vlc\vlc.exe |
"TCP Query User{46E8604B-1D6F-455B-AC7D-70B3333C20CF}C:\users\dannyv\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\dannyv\appdata\local\akamai\netsession_win.exe |
"TCP Query User{48664404-3A05-4744-9A87-29AB031CDA2E}C:\program files\steam\steamapps\dannyveq\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\dannyveq\team fortress 2\hl2.exe |
"TCP Query User{519FCACF-0716-43C4-82E0-E03AF09DBD4C}D:\far cry 3\bin\farcry3.exe" = protocol=6 | dir=in | app=d:\far cry 3\bin\farcry3.exe |
"TCP Query User{63CC3F56-9885-4D0E-8368-D786A5E559D8}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{66E4370D-E032-400F-A7D1-61DBD8B4AC43}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{6FA914BC-CB3E-4A44-B59F-0E5B2C14BC2F}D:\valve\hl.exe" = protocol=6 | dir=in | app=d:\valve\hl.exe |
"TCP Query User{70AE8BCC-4806-4F47-A5E9-06D42E193F81}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{7D82E73A-E102-4D7E-B3C3-9EB567D3969B}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"TCP Query User{8CFABF29-AAA4-4D28-9A10-C2E454750889}D:\turok\binaries\turokgame.exe" = protocol=6 | dir=in | app=d:\turok\binaries\turokgame.exe |
"TCP Query User{90E3A09E-2A27-4B6D-88C4-84A9AC087844}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{96185439-B742-43B0-BE13-39A6BF60465F}C:\users\dannyv\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\dannyv\appdata\local\akamai\netsession_win.exe |
"TCP Query User{9A6FB514-64F2-4EC4-A16E-7D1446521A48}D:\mount&blade with fire and sword\mb_wfas.exe" = protocol=6 | dir=in | app=d:\mount&blade with fire and sword\mb_wfas.exe |
"TCP Query User{A6257FCC-B123-4376-B137-A5743092372A}D:\mount&blade warband\mb_warband (2).exe" = protocol=6 | dir=in | app=d:\mount&blade warband\mb_warband (2).exe |
"TCP Query User{A66B79A5-4F32-4D0F-8907-AE5DAC9F3036}D:\tf\hl2.exe" = protocol=6 | dir=in | app=d:\tf\hl2.exe |
"TCP Query User{A7956E1D-4E32-48C7-ADAF-BF0DEF01BCCC}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{B573136D-53DB-4677-8816-92BF9245ECF2}D:\mount&blade with fire and sword\mb_wfas (2).exe" = protocol=6 | dir=in | app=d:\mount&blade with fire and sword\mb_wfas (2).exe |
"TCP Query User{B78E9444-2A8C-49AF-99C7-E06DB4E7D9E1}D:\rock of ages\binaries\win32\roa.exe" = protocol=6 | dir=in | app=d:\rock of ages\binaries\win32\roa.exe |
"TCP Query User{BED778FE-0AF9-4B96-BDAC-FFE95571D859}D:\borderlands 2\binaries\win32\borderlands2.exe" = protocol=6 | dir=in | app=d:\borderlands 2\binaries\win32\borderlands2.exe |
"TCP Query User{BF9B941C-3CC8-408A-AF62-40A93DC79ABB}I:\quake3\quake3.exe" = protocol=6 | dir=in | app=i:\quake3\quake3.exe |
"TCP Query User{CC4FE687-A32A-4629-B141-56D7CD4E12CC}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{D1FEDC25-258D-47D9-ABA1-982DE7BD5DA0}D:\hry\counter strike 1.6 modern warfare 2\hl.exe" = protocol=6 | dir=in | app=d:\hry\counter strike 1.6 modern warfare 2\hl.exe |
"TCP Query User{DE39F4C3-C1A5-44E3-909E-8238C8B130CC}D:\gh world tour\ghwt.exe" = protocol=6 | dir=in | app=d:\gh world tour\ghwt.exe |
"TCP Query User{DEB921CB-C0B8-4E36-A999-7FBBF545A93C}D:\chivalry medieval warfare\binaries\win32\udk.exe" = protocol=6 | dir=in | app=d:\chivalry medieval warfare\binaries\win32\udk.exe |
"UDP Query User{01E2D37A-1E1D-44A4-BCE5-F398CC799537}D:\rock of ages\binaries\win32\roa.exe" = protocol=17 | dir=in | app=d:\rock of ages\binaries\win32\roa.exe |
"UDP Query User{0418F53A-65E5-42EF-A5E3-F331499E115B}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{0879FD03-EBC7-4C00-BAAC-912983B52FF3}D:\gh world tour\ghwt (2).exe" = protocol=17 | dir=in | app=d:\gh world tour\ghwt (2).exe |
"UDP Query User{2F658464-CFCF-4624-881A-DA224DCEB9F6}D:\hry\counter strike 1.6 modern warfare 2\hl.exe" = protocol=17 | dir=in | app=d:\hry\counter strike 1.6 modern warfare 2\hl.exe |
"UDP Query User{2FCD16AC-1565-416C-BC74-AFF677ED5F63}C:\users\dannyv\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\dannyv\appdata\local\akamai\netsession_win.exe |
"UDP Query User{3053DFB8-1D8C-43F1-A56A-8EAD3C971FB2}D:\mount&blade warband\mb_warband (2).exe" = protocol=17 | dir=in | app=d:\mount&blade warband\mb_warband (2).exe |
"UDP Query User{3068ED0B-3C49-4B33-BBBC-5B387A1DCDA9}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{47BDEC39-925C-4862-8CEB-2F6DB83A6DDC}C:\users\dannyv\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\dannyv\appdata\local\akamai\netsession_win.exe |
"UDP Query User{4AA64FEF-073A-4E19-96D2-86BA2BC6BFE3}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{4B78CD6C-762C-46BD-A55C-A84CFF34E954}D:\chivalry medieval warfare\binaries\win32\udk.exe" = protocol=17 | dir=in | app=d:\chivalry medieval warfare\binaries\win32\udk.exe |
"UDP Query User{5E18D746-F741-4C5A-BA2D-84E4A9555CAE}D:\valve\hl.exe" = protocol=17 | dir=in | app=d:\valve\hl.exe |
"UDP Query User{5F7C93F2-DBBE-489E-A7EB-A2A20D94D65E}C:\program files\roger wilco\roger.exe" = protocol=17 | dir=in | app=c:\program files\roger wilco\roger.exe |
"UDP Query User{67A72230-D81E-44F2-BC72-490BFBF289D1}D:\mount&blade with fire and sword\mb_wfas (2).exe" = protocol=17 | dir=in | app=d:\mount&blade with fire and sword\mb_wfas (2).exe |
"UDP Query User{7295C0BD-07CB-4992-B02D-D018773C7E7A}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"UDP Query User{783AA5EB-F1FB-466E-85AB-90381DC52B98}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{7B301260-1CF2-4250-9F4F-89DFB03AEA6B}C:\program files\steam\steamapps\dannyveq\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\dannyveq\team fortress 2\hl2.exe |
"UDP Query User{7EA0991F-54A7-4AC2-9D01-8707DA350B93}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{84B9E34C-8CD3-4205-9E56-E4FEE4E7BE4F}I:\quake3\quake3.exe" = protocol=17 | dir=in | app=i:\quake3\quake3.exe |
"UDP Query User{888DFC0B-ACFC-42A7-8D5F-AF81977CDAF8}D:\borderlands 2\binaries\win32\borderlands2.exe" = protocol=17 | dir=in | app=d:\borderlands 2\binaries\win32\borderlands2.exe |
"UDP Query User{904EC9DE-4BF2-4A82-86AF-3A678DD67748}D:\gh world tour\ghwt.exe" = protocol=17 | dir=in | app=d:\gh world tour\ghwt.exe |
"UDP Query User{ADE6DF26-B2BB-4B5B-BC30-6CD9B8372E48}D:\far cry 3\bin\farcry3.exe" = protocol=17 | dir=in | app=d:\far cry 3\bin\farcry3.exe |
"UDP Query User{CCF68D9E-118D-4B8E-873C-DA6B49B656C6}D:\vlc\vlc.exe" = protocol=17 | dir=in | app=d:\vlc\vlc.exe |
"UDP Query User{D390488D-708A-43C6-89E9-093EEF390439}D:\turok\binaries\turokgame.exe" = protocol=17 | dir=in | app=d:\turok\binaries\turokgame.exe |
"UDP Query User{E88F03E4-9E8B-4182-8521-9CB5E562E9AA}D:\mount&blade with fire and sword\mb_wfas.exe" = protocol=17 | dir=in | app=d:\mount&blade with fire and sword\mb_wfas.exe |
"UDP Query User{F00E3AE2-A36E-44FD-8E4F-8E6C68A8C344}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{FE9A244D-57E0-418C-A869-5734C4B439D5}D:\tf\hl2.exe" = protocol=17 | dir=in | app=d:\tf\hl2.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{000E79B7-E725-4F01-870A-C12942B7F8E4}" = Crysis(R)
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0071820F-09B0-4998-8320-F89629DCBC99}" = Nero BackItUp
"{019908AA-79E9-4389-A1AD-8BBEED63CFBA}" = Call of Juarez - Bound in Blood
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052A1E34-A54B-458C-A4E3-24C3E054754A}" = Nero Kwik Media
"{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware
"{068B46A0-8858-4CEB-80BC-A4AE787A05FC}" = Windows Live Sync
"{0708FF30-78C0-47B0-81F0-C84604DC769C}" = Nero Express Help (CHM)
"{07119BED-86AE-4AE3-97A5-45A118A3F06A}" = Call of Juarez
"{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B03071A-C96E-34CA-E5A3-4D8DA8ACCB3D}" = CCC Help Polish
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM)
"{0CE1A6C0-F3F7-49E6-8F9D-2431F9827441}" = Guitar Hero III
"{0F414901-5ED4-11E1-86F3-F04DA23A5C58}" = Vegas Pro 11.0
"{0F6E17CB-0565-44A7-8C36-941EA56B215E}" = Worms World Party
"{106B4413-ACBB-4CDE-8707-587DB9BD77EC}" = LogMeIn Hamachi
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP495_series" = Canon MP495 series MP Drivers
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{1419B671-B248-48A6-87F2-D7B786CFB5F2}" = Shrek Forever After(TM)
"{1472627A-6E9F-DCB1-8894-E2BD249FD5E4}" = CCC Help Thai
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{14C36646-83C8-430E-92B3-16F998BDB4E0}" = Activision(R)
"{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}" = Risen
"{17CA32D1-73BD-4990-B8F6-369D8D34B05D}" = Microsoft Antimalware Service CS-CZ Language Pack
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19192A84-6172-4312-A661-D8F9A34585AB}" = VirtualDJ Home FREE
"{1943C3BD-4462-4612-92C3-D36DD917C447}" = Nero Recode
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1A2C316B-F842-6FB3-3C87-6FE02861F396}" = Catalyst Control Center
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1AA94747-3BF6-4237-9E1A-7B3067738FE1}" = Max Payne 3
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1BC3AF44-D80E-4744-A8E1-9BC540424AC9}" = Turok
"{1DC4E424-5D92-4C92-B1E1-4BE4318E7136}" = James Cameron's AVATAR(tm): THE GAME (Demo)
"{1E01600F-EF7C-42CA-BB99-C608B1CDFFEE}_is1" = "Brink"
"{1E445925-273D-4186-88A0-B8D1B6B119E2}" = WRC FIA World Rally Championship
"{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}" = Star Wars Jedi Knight Jedi Academy
"{1F16820E-D0E7-4636-939E-45CBFEFB06E1}" = Nero Kwik Media Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{218BE476-B206-2879-B912-971E6E89E44D}" = CCC Help Finnish
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
"{2890E324-6F3B-4975-8B95-E7D6D80E0226}" = Nero Burning ROM Help (CHM)
"{28A2EF20-B486-685D-6642-829180ED7683}" = ccc-utility
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic
"{2A96D655-4FEF-4512-9468-0AABA70CD389}" = Activision(R)
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = The Battle for Middle-earth (tm) II
"{2B653229-9854-4989-B780-D978F5F13EAB}" = FEAR
"{2DFFE333-1B60-4CAA-F836-3CF0C99777CA}" = CCC Help Norwegian
"{2E52FB79-7F60-4AD7-B946-5ED18B4F274E}" = ShaunWhiteSnowboarding
"{2F7655DD-793E-40C6-B348-DE67C109F6FF}" = Spider-Man 2
"{2L7IL77L-T4D4-75B1-98C5-18CD6E6334A3}_is1" = Call of Juarez The Cartel version 1.0
"{3293C06B-003F-4027-8380-FFD79E38167D}" = Tony Hawk's American Wasteland (TM)
"{32941438-AD79-4EF4-B7E4-86039E41B4D3}" = Bad Piggies
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33A22B2D-55BA-4508-B767-BF2E9C21A73F}" = Assassin's Creed Revelations 1.02
"{33DEE20D-3ADB-2089-A2BF-7729BFDE1C9E}" = AMD Media Foundation Decoders
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3604BFF4-6EC8-44D6-B147-92C2D642FEDE}" = Wheelman
"{364374D2-FE10-2170-2397-5B01F9D00093}" = CCC Help Spanish
"{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Games
"{3D374523-CFDE-461A-827E-2A102E2AB365}" = Star Wars Battlefront II
"{3F290582-3F4E-4B96-009C-E0BABAA40C42}" = The Battle for Middle-earth (tm)
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{40786C7F-7078-5147-444E-D45DE808B684}" = CCC Help Portuguese
"{415030B8-3E8B-462A-8C03-41D95AA3AB3B}" = Medal of Honor (TM)
"{41785C66-90F2-40CE-8CB5-1C94BFC97280}" = Microsoft Chart Controls for Microsoft .NET Framework 3.5
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{43430FA0-49F0-4B13-B4C5-611000008100}" = Super Street Fighter IV: Arcade Edition
"{43430FA1-12BB-4D88-862E-4F1000008400}" = Resident Evil: Operation Raccoon City
"{434D083E-7E9A-4D3A-914B-121000008100}" = Operation Flashpoint ®: Red River
"{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"{43D3EA3E-2B72-57F3-40E0-318A614D0FDD}" = CCC Help Czech
"{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
"{463F67F4-58D0-4C0D-BBC9-D0CC4E56D1B8}" = Windows Live UX Platform Language Pack
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{477AB6F3-0907-4E90-ABC2-9525CC6AA356}" = Beowulf TM
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"{4E2EA555-3DAE-4BE1-96BF-6A632ACFE8DE}" = LEGO® Batman™ 2: DC Super Heroes
"{4E4D0FA1-F880-4CCB-999A-501000008200}" = Dark Souls Prepare to Die Edition
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4F2CE68F-EDBB-4592-BF07-5AC930A51029}" = Nero 7 Premium
"{4F7823C4-BB28-A63E-CE08-1B463D4682DE}" = CCC Help Dutch
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client CS-CZ Language Pack
"{516A594B-FEFF-4521-B857-69809AB266FF}" = VC8&9 CRT and ATL
"{52419193-3A1B-4264-00BF-44BE0646F189}" = NHL07 Demo
"{52B94500-1782-411F-BFA5-EBAC312964DE}" = The Witcher Demo
"{53450FA2-E900-456E-9715-501000008200}" = Virtua Tennis 4™
"{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}" = Microsoft Security Client
"{560FC78C-A4B2-461D-9B47-820C1EEF87B8}" = Nero 12
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{578485F8-60F3-4C61-9183-0698E581B902}" = From Dust
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{5963F4B4-D138-47CD-ADEF-470E87E185BD}" = Nero Burning ROM
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}" = Nero Blu-ray Player Help (CHM)
"{5C5A944F-096E-4ADD-B8E8-887F18BA6228}" = LEGO® Harry Potter™: Years 5-7
"{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}" = OpenOffice.org 3.2
"{5F624839-947D-46EA-BD63-FD847C1AC6F1}" = BearShare
"{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}" = NCsoft Launcher
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{628C3D50-F524-4C49-A958-672CE7953756}" = The Lord of the Rings - Conquest™
"{62952508-8C6F-4D31-9802-099FC67B41C3}" = I Am Alive
"{643CC22D-0994-41A8-ACE8-CF11A2ACDC1C}" = OLYMPUS Viewer 2
"{64958DA4-79D3-43FD-AF06-720DAD044F9E}" = LEGO® Pirates of the Caribbean The Video Game
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66A405D2-BA14-4594-BF36-B3B544F0754E}" = Stronghold Legends
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}" = Power Tab Editor 1.7
"{6D7B8E2C-4356-619D-134F-FB36B0809958}" = CCC Help German
"{6D87CAD9-9B94-4421-A439-B25F8DE14575}" = Tom Clancy's Ghost Recon Future Soldier
"{6E737AC4-C430-4698-8790-C7D55F7107A4}" = Iron Man
"{6F173E00-2766-E174-C2E0-AD88F24685BD}" = CCC Help Swedish
"{6F1EC187-3C90-4CC5-A567-ADC4DC31CD61}" = The Spider-Man 2 Demo
"{6FAEC41D-0654-12C1-0068-770D19FC2446}" = CCC Help Italian
"{6J9IL70L-T4D4-75B1-97C5-1HJ16E633S4R1}_is1" = The Cursed Crusade version 1.0
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{712297BD-71F6-457E-8025-47F3F027390B}" = Terminator Salvation
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R)
"{73D239CC-D6B1-ADEC-A7BE-E100C7112004}" = CCC Help Korean
"{745D37C2-26F4-4B65-BA13-F9840EBFA75B}" = Might & Magic Heroes VI
"{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{773421E8-AD7B-4DC8-AED1-9300D69E1659}" = Touchstone Installer
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7774A6A9-CE0D-4544-9A29-84351BAE184A}" = Shrek 2
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79A933C8-E333-4D8D-9D5C-86945715E532}" = Auta
"{7CC978FD-AE31-419D-A7AB-2A137689AE1F}" = OLYMPUS Digital Camera Updater
"{7E19B002-4CA3-4C9F-BA92-91D101B97219}" = James Cameron's AVATAR(tm): THE GAME
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{8190420D-F4BA-4744-8940-A466F81AF89C}_is1" = Ulož.to File Manager verze 1.3
"{8236D2E9-2528-4C5C-ABA3-E0B8B657A297}" = BlackSite Area 51
"{828175FA-7307-4DBF-95AD-9CEE086B6F45}" = Welcome App (Start-up experience)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit
"{83FCCFCD-46E3-43FB-A397-78BFD5A8980A}" = Nero Video
"{848A7C68-0ADC-4193-8A89-2CEA78E56A0C}" = Nero Express
"{84BAD30E-07CD-496A-AC88-EE9C8DFE2327}_is1" = FlatOut
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{86847081-B387-4F49-AED1-C9B0A090D66C}" = Nero Recode Help (CHM)
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8829DAD4-8F07-4A96-B995-15498EBB8045}" = Heroes of Might and Magic V
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{88F0F4FF-B514-4E32-9C17-CAF96D60EAFC}" = Razer Game Booster
"{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A30D5C0-BD4A-4E65-AADF-20A457DE6D38}" = Windows Live Family Safety
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8D13EC59-1F8D-4988-8523-D5E8C2724C1D}" = Beowulf TM
"{8D3D92F0-852F-D832-FD8B-029C8C231C13}" = CCC Help Russian
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{90140000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{90850405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{915726DF-7891-444A-AA03-0DF1D64F561A}" = L.A. Noire
"{925D9613-EA6A-4DF0-9186-AD968159D1B1}" = Tony Hawk's American Wasteland 1.01 Patch
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9312191B-30A5-44E1-8D8D-6936FE06CDE8}" = Wanted: Weapons of Fate
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{963FFEAB-16E5-EB69-4E64-338B3D319FB4}" = CCC Help Chinese Standard
"{96B51C0B-D3BE-4DF3-959C-28B22C10CFBB}" = Vodafone Mobile Connect Lite
"{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3
"{97B4DF0B-7499-455F-AFBA-F70F64D6D86A}" = SweetIM for Messenger 3.5
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}" = Spider-Man 3(TM)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box
"{9B63540D-D942-4C38-B42E-A48AE0145970}" = Virtua Tennis(TM) 2009
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CCB3527-C033-415C-88B6-27173B5E3592}" = Tron: Evolution
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed(R) III v1.02
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{9F7E9D7B-3291-96CE-A27F-DD4F6EB230EA}" = CCC Help Chinese Traditional
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A11E24AD-A7EB-78C9-F792-AD9CDDB8B651}" = Catalyst Control Center InstallProxy
"{A126E617-63F0-4E57-BFA4-7190F5845C39}" = Guitar Hero World Tour
"{A174402A-2EE6-4B86-A930-7BC85A9933BD}" = Tom Clancy's Splinter Cell
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2B4455D-1046-4732-BFBC-0821BEFC07BC}" = Hellgate: London
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A6F873F6-F266-4CE4-945D-DFC06388F2CC}" = Hledá se Nemo
"{A6FDE264-C48D-36CE-CFA7-ABBEB861AC10}" = Catalyst Control Center Localization All
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Czech
"{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic
"{ADE91A13-434D-4229-00BC-182BAD607303}" = Need for Speed™ Most Wanted
"{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Prameny
"{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™
"{AEE8EC0E-5E70-44B7-AFA1-9FFBFBC7BD3D}" = Snajper
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"{Aladinova lampa}_is1" = Aladinova lampa 1.0
"{Anticky Rim}_is1" = Antický Řím 1.0
"{Auta snu}_is1" = Auta snů 1.0
"{B128179D-A5E1-43AC-9422-12A109ECD2A0}" = Nero Video Help (CHM)
"{B31A9284-632D-683E-3BD0-F6926D445A7B}" = CCC Help Danish
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{B69F28DF-CBB1-41B7-008A-210E4D0518FC}" = Harry Potter a Fénixův řád™
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6E3F2A0-DDBB-4F0A-BA7C-09138605DDAC}" = WRC FIA World Rally Championship
"{B710F12F-EE5B-4A81-0093-A9B714256A1B}" = NHL 2004 Demo
"{B7A75523-3D7F-CF23-12F7-999EAF6C7167}" = CCC Help Japanese
"{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287
"{B931FB80-537A-4600-00AD-AC5DEDB6C25B}" = The Lord of the Rings, The Rise of the Witch-king
"{B953732D-B623-4E84-B369-CFFF7B1AE06F}" = Nero RescueAgent
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{Brana svetu - cesta za horizont}_is1" = Brána světů - cesta za horizont 1.0
"{C13E90B0-4E1C-11DB-6784-0152EAA218BE}" = Call of Duty(R) 2 Patch 1.3
"{C16ADB2B-37C8-4AF8-A7D2-3A4B1BEF9662}" = Gothic
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{C5A8DF48-580B-44D3-B2B2-E965A9368F28}" = LEGO® Harry Potter™: Years 1-4
"{C6A538C7-4DE7-CA79-7B25-FB671CD29DE2}" = AMD Accelerated Video Transcoding
"{C6B7E731-A9E1-4AEC-A1E7-2E63646647FE}" = Prince of Persia Warrior Within (Demo)
"{C711E88C-9DC2-4254-A989-D6E017844DDF}" = Frontlines: Fuel of War
"{C72D7008-266D-4DD8-BF3C-296B736127F6}" = Mafia
"{C821D689-95BE-0D60-255E-D9B89CB3019F}" = Catalyst Control Center Graphics Previews Common
"{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}" = Stronghold
"{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM)
"{C9AAF970-4E7E-4C98-AD67-09C74379D345}" = Harry Potter and the Deathly Hallows™ - Part 1
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDF29D6C-AA05-49F9-A55A-89C2F8F4F46E}" = Quantum of Solace(TM)
"{CE1458AA-23A7-332D-68D9-86B799898DA6}" = CCC Help Greek
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{Cesta za dobrodruzstvim - Na stope duchum}_is1" = Cesta za dobrodružstvím - Na stopě duchům 1.0
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.11 Game
"{D4006E71-FF32-44FF-AD5A-B5EE4389B825}_is1" = FlatOut2
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D596980D-17BE-4425-B8F0-5640719AADE9}" = LEGO® Star Wars™: The Complete Saga
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{D9941688-1BEF-79EF-0FD9-E0A67E2CFE0F}" = AMD Drag and Drop Transcoding
"{DA2B455A-B0BE-4C5A-B73A-0615F37C81D5}" = Beowulf TM
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DDDA784F-1F6F-4ECA-B432-EBE0374C322D}" = Angry Birds Star Wars
"{DE3A8886-89A8-4470-B4AF-828BCD73D4C6}" = Minecraft 1.4.2
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DFF29C16-11B8-4AD2-AC1A-2841DA197982}" = Rally Championship Xtreme
"{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}" = Prince of Persia T2T
"{E0363CCC-3535-4BAA-9F2C-200F548675D6}" = TuneUp Utilities Language Pack (cs-CZ)
"{E0655E94-1D4D-8484-64C6-E6F847B7BE92}" = CCC Help Turkish
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E2F868EB-838C-40C5-BBFF-FAAD14666FD5}" = Prince of Persia The Two Thrones
"{E43B4909-141E-DFF3-8C58-62B5E4D66BBA}" = AMD Catalyst Install Manager
"{E555950B-1496-C37C-CA2C-2DF8745A5BE9}" = CCC Help English
"{E666E822-53A9-460B-BA99-35184AA80965}" = Hunting Unlimited 2011
"{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}" = Need for Speed™ Undercover
"{EAEAAF8C-8E86-4CAC-AC08-1A33EDCA34AC}" = Prince of Persia® Zapomenuté písky
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB644850-2B95-4D66-9C29-2B34CAC25947}_is1" = Watchmen: The End is Nigh
"{EE229D0E-3D9E-636C-6E75-9436A87C7E49}" = CCC Help French
"{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia Warrior Within
"{EE74D039-45D7-44E9-BF95-B9CFB015964F_P1}_is1" = ArcaniA - Gothic 4 Patch
"{EE91E474-9298-47B8-817F-8E0042408998}" = Risen Hotfix 1.01
"{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM)
"{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}" = The Witcher 2
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0C9E8E9-C54B-48C1-9192-F5D49633AB5D}" = Harry Potter and the Deathly Hallows(TM) - Part 2
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = The Witcher Enhanced Edition
"{F2436338-94C7-4249-943F-F8A16529B498}" = Gotcha! Demo
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"{F2E23139-3404-4E3C-9855-7724415D62A5}" = Dragon Age II
"{F536CCF1-C4C1-5FB9-6B17-F883DFFAE569}" = CCC Help Hungarian
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F68563C0-2CCD-4799-A014-017A370D627B}" = Sběratelská edice Heroes of Might and Magic V
"{F68A7F48-9F26-4FB1-A7C2-DF3C0F2D849C}" = Crazy Taxi
"{F78AC3C0-578C-49AB-BD4E-3107A6036A13}" = Tom Clancy's Ghost Recon Advanced Warfighter® 2
"{F8EF9B71-53E7-41F5-8E54-47B4C979CB38}" = Nero Backup Drivers
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FB9CDF41-F0B9-4F31-9230-7DF0D6637270}" = Call of Duty(R) 2 Demo
"{FC8A7918-D65D-440C-9596-C88185E8DCA4}" = Activision(R)
"{FD416706-875C-4B0B-A23A-9E740DAE029E}" = Tom Clancy's Rainbow Six Vegas 2
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FF10D622-7BFE-48C6-8DF6-40D8CB1D3C1B}" = Auta 2
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{Pruzkumnici - Ztraceni v oceanu}_is1" = Průzkumníci - Ztraceni v oceánu 1.0
"{Tibet vola}_is1" = Tibet volá 1.0
"{Ztracené Eldorádo}_is1" = Ztracené Eldorádo 1.0
"3DSexVilla-031.001" = thriXXX 3DSexVilla-031.001
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"7-Zip" = 7-Zip 9.20
"Act of War High Treason Demo_is1" = Act of War High Treason Demo
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Akamai" = Akamai NetSession Interface Service
"Alan Wake American Nightmare_is1" = Alan Wake American Nightmare
"Alice: Madness Returns_is1" = Alice: Madness Returns
"ArcaniA" = ArcaniA - Gothic 4
"Around the World in 80 Days" = Around the World in 80 Days
"ASIO4ALL" = ASIO4ALL
"ASM_Laguna_is1" = The Amazing Spider-Man
"Assassin's Creed III_R.G. Mechanics_is1" = Assassin's Creed III
"BearShare" = BearShare
"Borderlands 2" = Borderlands 2
"Brink_is1" = Brink
"Call of Booty_is1" = Call of Booty
"Call of Duty - United Offensive Single Player Demo" = Call of Duty - United Offensive Single Player Demo
"Call of Duty: Black Ops_is1" = Call of Duty: Black Ops
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon My Printer
"CanonSolutionMenuEX" = Canon Solution Menu EX
"CCleaner" = CCleaner
"CoD 2 čeština_is1" = CoD 2 čeština
"Codename: Outbreak" = Codename: Outbreak
"Cradle Of Rome" = Cradle Of Rome
"Cross Fire_is1" = Cross Fire En
"Crysis WARHEAD(R)" = Crysis WARHEAD(R)
"DAEMON Tools Lite" = DAEMON Tools Lite
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Darkest of Days_is1" = Raven Squad
"Darksiders II_is1" = Darksiders II
"D-Day: Normandy_is1" = D-Day: Normandy
"Delta Force Black Hawk Down Demo" = Delta Force Black Hawk Down Demo
"DiRT 3_is1" = DiRT 3
"Dll-Files Fixer_is1" = Dll-Files Fixer
"E77704EF5E71F4F18CADFBFA68595AFE036D5D97" = Balíček ovladače systému Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)
"Easy-PhotoPrint EX" = Canon Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"ECSP MHD Simulator 2007" = ECSP MHD Simulator 2007
"Emergency 2012" = Emergency 2012
"eToolKit" = eToolKit
"ExpressBurn" = Express Burn
"Far Cry 3_is1" = Far Cry 3 v1.03
"FL Studio 10" = FL Studio 10
"FlatOut Ultimate Carnage" = FlatOut Ultimate Carnage
"Fraps" = Fraps (remove only)
"FreeArc" = FreeArc 0.666
"GameParkClient_is1" = GamePark
"GameSpy Software" = GameSpy Software
"GFWL_{43430FA0-49F0-4B13-B4C5-611000008100}" = Super Street Fighter IV: Arcade Edition
"GFWL_{434D083E-7E9A-4D3A-914B-121000008100}" = Operation Flashpoint ®: Red River
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}" = Dark Souls Prepare to Die Edition
"GFWL_{53450FA2-E900-456E-9715-501000008200}" = Virtua Tennis 4™
"Google Chrome" = Google Chrome
"Google Updater" = Google Updater
"GotClip" = GotClip Downloader
"Guitar Pro 4.0.7" = Guitar Pro 4.0.7
"Guitar Pro 5_is1" = Guitar Pro 5.0
"Half-Life Uplink" = Half-Life Uplink
"Heroes of Hellas 2: Olympia" = Heroes of Hellas 2: Olympia
"Heroes of Hellas 3: Athény" = Heroes of Hellas 3: Athény
"Hunting Unlimited 2009" = Hunting Unlimited 2009 1.0
"CheckUpPC" = CheckUpPC
"Chivalry Medieval Warfare (c) Torn Banner Studios_is1" = Chivalry Medieval Warfare (c) Torn Banner Studios version 1
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"IL Download Manager" = IL Download Manager
"IL Shared Libraries" = IL Shared Libraries
"iMesh" = iMesh
"Indeo® Software" = Indeo® Software
"InstallShield_{019908AA-79E9-4389-A1AD-8BBEED63CFBA}" = Call of Juarez - Bound in Blood
"InstallShield_{07119BED-86AE-4AE3-97A5-45A118A3F06A}" = Call of Juarez
"InstallShield_{0F6E17CB-0565-44A7-8C36-941EA56B215E}" = Worms World Party
"InstallShield_{1419B671-B248-48A6-87F2-D7B786CFB5F2}" = Shrek Forever After(TM)
"InstallShield_{14C36646-83C8-430E-92B3-16F998BDB4E0}" = Spider-Man(TM) - Shattered Dimensions
"InstallShield_{2A96D655-4FEF-4512-9468-0AABA70CD389}" = Transformers(TM) - War for Cybertron(TM)
"InstallShield_{2F7655DD-793E-40C6-B348-DE67C109F6FF}" = Spider-Man 2
"InstallShield_{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"InstallShield_{62952508-8C6F-4D31-9802-099FC67B41C3}" = I Am Alive
"InstallShield_{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"InstallShield_{6F1EC187-3C90-4CC5-A567-ADC4DC31CD61}" = The Spider-Man 2 Demo
"InstallShield_{7774A6A9-CE0D-4544-9A29-84351BAE184A}" = Shrek 2
"InstallShield_{79A933C8-E333-4D8D-9D5C-86945715E532}" = Auta
"InstallShield_{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}" = Spider-Man 3 (TM)
"InstallShield_{A6F873F6-F266-4CE4-945D-DFC06388F2CC}" = Hledá se Nemo
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{C16ADB2B-37C8-4AF8-A7D2-3A4B1BEF9662}" = Gothic
"InstallShield_{CDF29D6C-AA05-49F9-A55A-89C2F8F4F46E}" = Quantum of Solace(TM)
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}" = LEGO® Star Wars™: The Complete Saga
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"InstallShield_{FB9CDF41-F0B9-4F31-9230-7DF0D6637270}" = Call of Duty(R) 2 Demo
"InstallShield_{FC8A7918-D65D-440C-9596-C88185E8DCA4}" = Drum Controller Standard Tuning Kit
"Joan of Arc" = Johanka z Arku
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.8.0 (Full)
"Legend - Legacy Of The Dragons_is1" = Legend - Legacy Of The Dragons (with media and plugins), versio
"LogMeIn Hamachi" = LogMeIn Hamachi
"McAfee Security Scan" = McAfee Security Scan Plus
"Metin2_is1" = Metin2
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"MotoGP_is1" = MotoGP
"Mount&Blade" = Mount&Blade
"Mount&Blade Warband" = Mount&Blade Warband
"Mount&Blade With Fire and Sword" = Mount&Blade With Fire and Sword
"Mozilla Firefox 15.0.1 (x86 cs)" = Mozilla Firefox 15.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 4.0" = Canon MP Navigator EX 4.0
"NSS" = Norton Security Scan
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"Origin" = Origin
"Paintball2" = Paintball2 Alpha build 016
"pcsx2-r4600" = PCSX2 - Playstation 2 Emulator
"Picasa 3" = Picasa 3
"Playlogic_KOTT2" = Knights of the Temple 2
"Polda II_is1" = Polda II
"Polda III_is1" = Polda III
"Polda IV_is1" = Polda IV
"Polda V_is1" = Polda V
"Polda_is1" = Polda
"Prince of Persia_is1" = Prince of Persia
"PunkBusterSvc" = PunkBuster Services
"Puppet Wars_is1" = Puppet Wars
"QnJ1dGFsIExlZ2VuZA==_is1" = Brutal Legend version 1
"Quake2DemoUninstallKey" = Quake II Demo
"Rage_is1" = Rage
"RealPlayer 15.0" = RealPlayer
"Registrace uživatele zařízení Canon MP495 series" = Registrace uživatele zařízení Canon MP495 series
"RemingtonSuperSlamAfrica" = Remington Super Slam Hunting: Africa
"Rez" = Řež
"Scorpions WinCheater 2.07 (s databází 117)_is1" = Scorpions WinCheater
"Scrapland_is1" = Scrapland
"Smart Defrag 2_is1" = Smart Defrag 2
"Sound Effect Maker_is1" = Sound Effect Maker version 1.2
"Star Wars The Force Unleashed_is1" = Star Wars The Force Unleashed
"Star Wars: The Force Unleashed 2_is1" = Star Wars: The Force Unleashed 2
"Stargate Resistance" = Stargate Resistance
"Steam" = Steam
"Steam App 440" = Team Fortress 2
"Super Castle Attack" = Super Castle Attack
"Sword of Damocles: Warlords" = Sword of Damocles: Warlords 3.92
"Swords and Sandals 2" = Swords and Sandals 2 2.0
"Test Drive Unlimited 2_is1" = Test Drive Unlimited 2
"The KMPlayer" = The KMPlayer (remove only)
"The Treasures Of Montezuma 2" = The Treasures Of Montezuma 2
"The Witcher 2" = The Witcher 2
"theHunter" = theHunter (remove only)
"TiMoC1.1" = TiMoC
"TorrentDownload" = Torrent Download 2.1
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"Tunngle beta_is1" = Tunngle beta
"Two Worlds II" = Two Worlds II
"uTorrent" = µTorrent
"Vietcong" = Vietcong
"VLC media player" = VLC media player 1.1.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"WolfTeam" = WolfTeam
"Wonderland Online_is1" = Wonderland Online
"World of Warcraft" = World of Warcraft
"World War 1990_is1" = World War 1990 High Edition v 1.0
"Xfire" = Xfire (remove only)
"yuPlay клиент_is1" = yuPlay client 0.7.24
"ZonerPhotoStudio12_CZ_is1" = Zoner Photo Studio 12
"ZonerPhotoStudio15_CZ_is1" = Zoner Photo Studio 15

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2498825763-850277669-1110203184-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Aliens vs Predator" = Aliens vs Predator
"Counter-Strike 1.6 v42b instalace" = Counter-Strike 1.6 v42b instalace
"CT2481032" = Ashampoo US Toolbar
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 3.3.2013 12:26:22 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 1:44:16 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 1:54:31 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 8:43:49 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 8:53:55 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 9:04:04 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 12:36:38 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 13:47:47 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 13:55:22 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

Error - 4.3.2013 14:05:28 | Computer Name = pc-PC | Source = MsiInstaller | ID = 11706
Description =

[ System Events ]
Error - 4.3.2013 14:23:27 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7023
Description = Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena
s následující chybou: %%-2140993535

Error - 4.3.2013 14:23:27 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7001
Description = Služba Seskupování v sítích peer-to-peer závisí na službě Protokol
PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující
chyby: %%-2140993535

Error - 4.3.2013 14:23:27 | Computer Name = pc-PC | Source = PNRPSvc | ID = 102
Description =

Error - 4.3.2013 14:23:28 | Computer Name = pc-PC | Source = PNRPSvc | ID = 102
Description =

Error - 4.3.2013 14:23:27 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7023
Description = Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena
s následující chybou: %%-2140993535

Error - 4.3.2013 14:23:27 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7001
Description = Služba Seskupování v sítích peer-to-peer závisí na službě Protokol
PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující
chyby: %%-2140993535

Error - 4.3.2013 14:23:28 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7023
Description = Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena
s následující chybou: %%-2140993535

Error - 4.3.2013 14:23:28 | Computer Name = pc-PC | Source = Service Control Manager | ID = 7001
Description = Služba Seskupování v sítích peer-to-peer závisí na službě Protokol
PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující
chyby: %%-2140993535

Error - 4.3.2013 14:30:05 | Computer Name = pc-PC | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error - 4.3.2013 14:30:08 | Computer Name = pc-PC | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\DR0 má chybný blok.


< End of report >

Dovolim si otazku, ma cenu lecit PC, ktere si uzivatel s prominutim zaliska hned vlastni blbosti zpatky diky crackum\keygenum a podobnym "dobrotami" Nehlede na porusovani autorskeho zakona

No nemá máte pravdu ono není moje jen jsem kamarádovy přišel nastavit wifi na laptop protože zapomněl heslo které jsem mu kdysi napsal s upozorněním "neztratit". A když jsem viděl tu spoušť tak mě to nedalo to nechat zkontrolovat.

Pokud chcete pokracovat, tak odinstalujte tu spoustu nelegalniho SW, pomazte cracky\keygeny a pujdeme dale...