VIRY.CZ

Dobrý den,
potřeboval bych poradit s mým PC: instalace/odinstalace programů je extrémně pomalá. Tedy pokud program využívá instalační službu Windows. Pro ilustraci - aktualizace Javy je třeba operace na cca 2-3 hodiny. Ostatní instalátory jsou v pohodě.
Přikládám log z RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by Doma at 2013-11-07 22:21:58
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 202 GB (40%) free of 500 GB
Total RAM: 3838 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:22:00, on 7.11.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\3M\PDNotes\PDNotes.exe
C:\Program Files (x86)\XFast USB\XFastUsb.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\trend micro\Doma.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: DownlOad keepeeR - {7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD} - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.dll (file missing)
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [XFast USB] C:\Program Files (x86)\XFast USB\XFastUsb.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.6\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Post-it(R) Digital Notes.lnk = C:\Program Files (x86)\3M\PDNotes\PDNotes.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Create a Post-it® Note - C:\Program Files (x86)\3M\PDNotes\\PSNBookMark.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 0595118392
O16 - DPF: {97A54521-3528-487D-A15E-E6F19AD67AA3} (Hybrid WebView) - http://10.100.102.200:8085/liveview-htm ... bViewS.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://89.203.196.254/activex/AMC.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupControlXP Class) - https://juniper.net/dana-cached/setup/J ... tupSP1.cab
O16 - DPF: {EC71A2BE-E211-41F9-BCAF-4EFF13426DFE} (RossmCZActiveFormX Element) - https://shop.rossmanncz.orwonet.de/shop ... upload.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com//activex/ractrl.cab?lmi=1007
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: Ubiquiti AirControl 2 Server (UbiquitiAirControl2Server) - Unknown owner - C:\Program Files\Ubiquiti Networks\airControl2\lib\jsl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12401 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
atieclxx
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\Ubiquiti Networks\airControl2\lib\jsl.exe" -ini "jsl.ini"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2208
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
\??\C:\Windows\system32\conhost.exe "-181447469-19628693995863817928300129181729670881-885714711-1132452261-1738099942
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-8f7e435e-0a59-4a55-8885-fd50c8288955 -SystemEventPortName:HostProcess-7b1d8f78-858e-4160-b64b-d78f0f55857e -IoCancelEventPortName:HostProcess-1d49c3c9-33ab-4f2f-8d70-c8f9d82defd2 -NonStateChangingEventPortName:HostProcess-bcaa7444-61c9-49e2-9c38-c8741ef2feee -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5d9d8324-36a1-4e08-bdfd-6fe73deedb6a -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe"
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\3M\PDNotes\PDNotes.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\XFast USB\XFastUsb.exe"
"C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"taskhost.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe235_ Global\UsGthrCtrlFltPipeMssGthrPipe235 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\Doma\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD}]
DownlOad keepeeR - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{887cdc33-0de3-4fd5-a5d3-eccd4b4b396c}]
PDN64BitBookMarkActivator.BookMark64BitActivator - C:\Windows\system32\mscoree.dll [2010-11-05 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-11-23 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-19 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD}]
DownlOad keepeeR - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files (x86)\google\googletoolbar1.dll [2012-05-06 2137152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{735abc4c-9266-4008-9ef6-bc60be8de31f} - Post-it® Digital Notes - C:\Windows\system32\mscoree.dll [2010-11-05 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-11-23 520192]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files (x86)\google\googletoolbar1.dll [2012-05-06 2137152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-08-18 8067616]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-08-12 1356240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=C:\Program Files (x86)\ICQ7.6\ICQ.exe [2011-10-10 127040]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe [2012-05-06 165304]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-02 20474528]
"Google Update"=C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-23 136176]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"XFast USB"=C:\Program Files (x86)\XFast USB\XFastUsb.exe [2011-10-28 4878912]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 641704]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"AllShareAgent"=C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [2012-03-01 285072]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Post-it(R) Digital Notes.lnk - C:\Program Files (x86)\3M\PDNotes\PDNotes.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.l3pacm"=l3codecp.acm
"msacm.aacacm"=AACACM.acm
"msacm.ac3acm"=ac3acm.acm
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.avis"=ff_acm.acm
"vidc.x264"=x264vfw.dll
"msacm.ac3filter"=ac3filter.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-05 16:41:19 ----D---- C:\Users\Doma\AppData\Roaming\LibreOffice
2013-11-05 15:56:15 ----D---- C:\Program Files (x86)\LibreOffice 4
2013-11-05 15:56:11 ----SHD---- C:\Config.Msi
2013-11-03 22:09:35 ----A---- C:\Windows\system32\drivers\zghsser.sys
2013-11-03 22:09:35 ----A---- C:\Windows\system32\drivers\zghsnet.sys
2013-11-03 22:09:35 ----A---- C:\Windows\system32\drivers\ghsser.sys
2013-11-03 22:09:35 ----A---- C:\Windows\system32\drivers\ghsnet.sys
2013-11-03 22:09:32 ----A---- C:\Windows\system32\WinUSBCoInstaller2.dll
2013-11-03 22:09:31 ----D---- C:\Program Files\ZTE_Handset_USB_Driver
2013-11-03 13:43:19 ----D---- C:\Users\Doma\AppData\Roaming\.minecraft
2013-10-28 10:33:56 ----D---- C:\ProgramData\Download keeper
2013-10-28 10:31:30 ----D---- C:\ProgramData\WinterSoft
2013-10-28 10:31:29 ----D---- C:\Program Files (x86)\ss helper
2013-10-28 10:31:18 ----D---- C:\ProgramData\DownlOad keepeeR
2013-10-28 10:31:18 ----D---- C:\ProgramData\bc189bb681b3f841
2013-10-28 10:30:12 ----D---- C:\ProgramData\InstallMate
2013-10-25 17:29:34 ----D---- C:\ProgramData\SP_FT_Logs
2013-10-25 17:25:15 ----A---- C:\Windows\system32\drivers\massfilter_hs.sys
2013-10-25 17:25:12 ----A---- C:\Windows\AdbWinUsbApi.dll
2013-10-25 17:25:12 ----A---- C:\Windows\AdbWinApi.dll
2013-10-25 17:25:12 ----A---- C:\Windows\adb.exe
2013-10-25 17:22:43 ----D---- C:\Program Files (x86)\PdaNet for Android
2013-10-24 17:05:06 ----A---- C:\Windows\SYSWOW64\msvcr100.dll
2013-10-24 17:05:06 ----A---- C:\Windows\SYSWOW64\msvcp100.dll
2013-10-19 12:28:23 ----D---- C:\ProgramData\Oracle
2013-10-19 12:18:18 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-10-19 12:18:15 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-10-19 12:18:15 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-10-19 12:18:15 ----A---- C:\Windows\SYSWOW64\java.exe
2013-10-16 07:09:48 ----A---- C:\TDSSKiller.3.0.0.14_16.10.2013_08.09.48_log.txt
2013-10-16 07:06:37 ----A---- C:\TDSSKiller.2.8.16.0_16.10.2013_08.06.37_log.txt
2013-10-13 06:32:39 ----D---- C:\rsit
2013-10-11 20:53:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-11 20:53:51 ----A---- C:\Windows\system32\ieui.dll
2013-10-11 20:53:50 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-11 20:53:50 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-11 20:53:50 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-11 20:53:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-11 20:53:50 ----A---- C:\Windows\system32\iesetup.dll
2013-10-11 20:53:50 ----A---- C:\Windows\system32\iernonce.dll
2013-10-11 20:53:50 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-11 20:53:49 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-11 20:53:49 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 20:53:49 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-11 20:53:49 ----A---- C:\Windows\system32\iertutil.dll
2013-10-11 20:53:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-11 20:53:47 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-11 20:53:47 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-11 20:53:47 ----A---- C:\Windows\system32\jscript.dll
2013-10-11 20:53:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-11 20:53:46 ----A---- C:\Windows\system32\jscript9.dll
2013-10-11 20:53:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-11 20:53:45 ----A---- C:\Windows\system32\urlmon.dll
2013-10-11 20:53:44 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-11 20:53:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-11 20:53:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-11 20:53:43 ----A---- C:\Windows\system32\wininet.dll
2013-10-11 20:53:42 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-11 20:53:41 ----A---- C:\Windows\system32\ieframe.dll
2013-10-11 20:53:40 ----A---- C:\Windows\system32\mshtml.dll
2013-10-11 20:53:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-11 05:16:05 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-11 05:16:05 ----A---- C:\Windows\system32\comctl32.dll
2013-10-11 05:16:01 ----A---- C:\Windows\system32\drivers\usbser.sys
2013-10-11 05:15:57 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-11 05:15:57 ----A---- C:\Windows\system32\dciman32.dll
2013-10-11 05:15:57 ----A---- C:\Windows\system32\atmfd.dll
2013-10-11 05:15:56 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-11 05:15:56 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-11 05:15:56 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-11 05:15:56 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-11 05:15:56 ----A---- C:\Windows\system32\lpk.dll
2013-10-11 05:15:56 ----A---- C:\Windows\system32\fontsub.dll
2013-10-11 05:15:56 ----A---- C:\Windows\system32\atmlib.dll
2013-10-11 05:15:53 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-11 05:15:53 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-10-11 05:15:53 ----A---- C:\Windows\system32\drivers\usbscan.sys
2013-10-11 05:15:53 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-11 05:15:52 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-11 05:15:52 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-11 05:15:52 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-11 05:15:52 ----A---- C:\Windows\system32\mswsock.dll
2013-10-11 05:15:52 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-11 05:15:52 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-11 05:15:52 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-11 05:15:52 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-11 05:15:52 ----A---- C:\Windows\system32\davclnt.dll
2013-10-11 05:15:51 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-11 05:15:51 ----A---- C:\Windows\system32\win32k.sys
2013-10-11 05:15:51 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-11 05:15:50 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-11 05:15:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-11 05:15:50 ----A---- C:\Windows\system32\advapi32.dll
2013-10-11 05:15:49 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-10-11 05:15:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-11 05:15:49 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-11 05:15:49 ----A---- C:\Windows\system32\tdh.dll
2013-10-11 05:15:49 ----A---- C:\Windows\system32\ntdll.dll
2013-10-11 05:15:48 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-11 05:15:48 ----A---- C:\Windows\system32\wow64.dll
2013-10-11 05:15:47 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-11 05:15:47 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-11 05:15:47 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-11 05:15:47 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-11 05:15:47 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-11 05:15:44 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 05:15:44 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 05:15:44 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-11 05:15:43 ----A---- C:\Windows\system32\scavengeui.dll

======List of files/folders modified in the last 1 month======

2013-11-07 22:21:59 ----D---- C:\Program Files\trend micro
2013-11-07 22:21:29 ----D---- C:\Users\Doma\AppData\Roaming\ICQ
2013-11-07 22:21:25 ----D---- C:\Users\Doma\AppData\Roaming\Skype
2013-11-07 22:13:12 ----D---- C:\Windows\Temp
2013-11-07 20:47:38 ----D---- C:\Windows\system32\config
2013-11-07 20:37:33 ----D---- C:\Windows\SysWOW64
2013-11-06 18:19:20 ----D---- C:\Windows\System32
2013-11-06 18:19:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-06 18:19:19 ----D---- C:\Windows\inf
2013-11-05 16:41:57 ----D---- C:\Download
2013-11-05 15:58:21 ----SHD---- C:\Windows\Installer
2013-11-05 15:58:20 ----RSD---- C:\Windows\assembly
2013-11-05 15:56:37 ----RSD---- C:\Windows\Fonts
2013-11-05 15:56:15 ----D---- C:\Program Files (x86)
2013-11-04 21:45:13 ----D---- C:\Windows\system32\DriverStore
2013-11-04 21:45:13 ----D---- C:\Windows\system32\drivers
2013-11-04 21:45:13 ----D---- C:\Windows\system32\catroot
2013-11-04 21:17:36 ----D---- C:\Program Files (x86)\AviSynth
2013-11-04 21:17:09 ----D---- C:\Program Files\Mouse
2013-11-04 21:16:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-04 21:16:58 ----D---- C:\Program Files (x86)\ViaVoiceTTS
2013-11-04 21:15:32 ----D---- C:\Windows\lhsp
2013-11-04 21:15:14 ----D---- C:\Windows\Downloaded Program Files
2013-11-04 21:15:05 ----D---- C:\Users\Doma\AppData\Roaming\Juniper Networks
2013-11-04 21:14:53 ----RD---- C:\Program Files
2013-11-04 21:14:37 ----D---- C:\Program Files (x86)\Free Download Manager
2013-11-04 21:14:32 ----HD---- C:\ProgramData
2013-11-04 21:13:52 ----D---- C:\Users\Doma\AppData\Roaming\Vso
2013-11-04 21:13:50 ----A---- C:\Users\Doma\AppData\Roaming\inst.exe
2013-11-04 19:31:12 ----D---- C:\Downloads
2013-11-04 18:58:28 ----D---- C:\Program Files (x86)\JDownloader
2013-11-03 13:45:48 ----D---- C:\Users\Doma\AppData\Roaming\.minecraft_old
2013-11-02 23:10:39 ----D---- C:\Users\Doma\AppData\Roaming\SPlayer
2013-11-02 23:10:39 ----D---- C:\Program Files (x86)\SPlayer
2013-10-31 06:14:19 ----D---- C:\Windows\system32\catroot2
2013-10-30 18:10:32 ----D---- C:\Windows\system32\FxsTmp
2013-10-28 10:30:55 ----D---- C:\Users\Doma\AppData\Roaming\uTorrent
2013-10-27 14:11:25 ----D---- C:\Users\Doma\AppData\Roaming\AIMP3
2013-10-25 17:25:12 ----D---- C:\Windows
2013-10-25 14:57:34 ----D---- C:\Users\Doma\AppData\Roaming\Aegisub
2013-10-24 11:58:32 ----D---- C:\ProgramData\Skype
2013-10-24 11:58:29 ----RD---- C:\Program Files (x86)\Skype
2013-10-24 11:31:52 ----D---- C:\Users\Doma\AppData\Roaming\YouTube Downloader
2013-10-16 16:08:55 ----D---- C:\Windows\winsxs
2013-10-14 21:41:23 ----D---- C:\Program Files\CCleaner
2013-10-12 06:59:33 ----D---- C:\Windows\Microsoft.NET
2013-10-12 06:55:28 ----D---- C:\Windows\Prefetch
2013-10-12 06:54:06 ----D---- C:\Program Files\Microsoft Silverlight
2013-10-12 06:54:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-10-11 22:18:38 ----D---- C:\Program Files\Internet Explorer
2013-10-11 22:18:38 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-11 22:18:37 ----D---- C:\Windows\AppPatch
2013-10-11 20:55:17 ----D---- C:\ProgramData\Microsoft Help
2013-10-11 20:45:46 ----D---- C:\Windows\system32\MRT
2013-10-11 20:41:20 ----A---- C:\Windows\system32\MRT.exe
2013-10-11 20:24:22 ----D---- C:\Windows\system32\cs-CZ
2013-10-10 02:11:48 ----D---- C:\Program Files\Microsoft Security Client
2013-10-10 02:11:47 ----D---- C:\Program Files (x86)\Microsoft Security Client
2013-10-09 16:26:56 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-10-08 16:29:00 ----D---- C:\Windows\rescache

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-06-16 79488]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-06-16 40064]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2010-06-17 16440]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-06-18 247216]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-18 834544]
R1 Amfilter;Compatible Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfltx64.sys [2007-10-15 12288]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 34472]
R1 FNETURPX;FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [2011-10-28 15936]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2010-11-23 230352]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 139616]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-04 359936]
R3 FNETTBOH_305;FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [2013-10-25 32320]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-24 1983264]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-09-29 46720]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352]
S2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
S3 Amusbprt;USB HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbx64.sys [2008-02-13 17920]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-04 11922944]
S3 awUSB;awUSB; C:\Windows\system32\DRIVERS\USBDrv_AMD64.sys [2013-02-05 17280]
S3 massfilter_hs;HS HandSet Mass Storage Filter Driver; C:\Windows\system32\DRIVERS\massfilter_hs.sys [2012-06-20 20232]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-01-19 82816]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Rockusb;Driver for Rockusb Device; C:\Windows\system32\DRIVERS\rockusb.sys [2012-03-07 65648]
S3 smsbda;DVB-T TV Stick; C:\Windows\system32\drivers\smsbda.sys [2009-09-17 63520]
S3 trufos;trufos; C:\Windows\system32\drivers\trufos.sys [2013-07-30 350160]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-02-17 156080]
S3 WinUSB;Android USB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 zghsser;ZTE General Handset Serial Port; C:\Windows\system32\DRIVERS\zghsser.sys [2012-07-18 132104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-04 238080]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-08-12 23808]
R2 SamsungAllShareV2.0;Samsung AllShare PC; C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-02 25504]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
R2 UbiquitiAirControl2Server;Ubiquiti AirControl 2 Server; C:\Program Files\Ubiquiti Networks\airControl2\lib\jsl.exe [2013-04-02 122368]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-08-12 366600]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-15 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-15 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SimpleSlideShowServer;SimpleSlideShowServer; C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-02 27584]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-11-23 1255736]

-----------------EOF-----------------

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Dobrý den, takže log z JRT:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Doma on Łt 12.11.2013 at 6:28:01,60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\facemoods_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\facemoods_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\facemoodssrv_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\facemoodssrv_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskPIP_FF__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskPIP_FF__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskPIP_FF__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskPIP_FF__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Doma\AppData\Roaming\pdfforge"
Successfully deleted: [Folder] "C:\Users\Doma\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Doma\appdata\local\apn"
Successfully deleted: [Folder] "C:\Program Files (x86)\ytd"
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{001BFC22-727A-4852-9A00-E21AA5FA74F4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{01227443-3C12-4A8E-9BBA-B7243DF55D59}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{012460DD-4BF5-4E35-963E-D70F34FA5060}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{012B6FAD-E587-41BF-915A-30DAF214EDF6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0134302A-7C51-44CE-A094-A34F2EE2139E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{014B8442-DB39-49FE-AE45-C0F01FF7D798}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{015B9016-0E46-4785-87B7-EF235699335D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{020B6FDF-693E-4167-B763-203B99EB86E1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{02BA3C9E-23FD-487B-A872-3DED5CFF5A72}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{03C591A3-9620-417D-A785-4ED239C3CDA7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{03CAC116-28FA-4266-927E-C738B0EF9A85}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{03D88EC7-B707-4743-9923-36D4805E8C9A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{03F800F1-98F2-4BD9-89FF-0B9B89CDF984}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{04063A2D-8054-406D-9012-3BDFA08F3096}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{043F39ED-2BAE-4354-8BC4-497A299BD11B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{04EC9C6B-0F31-4AE5-B752-8F56B58A2EA0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{056E43BB-AD69-46FC-AB1B-9A84C68A1CDA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{05BF8A8B-4C48-4EB5-8026-2DFE3F1B2813}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{05D736D5-11B7-44C8-91F0-BB01BB68FBDD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{066BFE3D-A0CA-46CB-BFB8-D008F2C6E162}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{069CB2D3-D007-4D5B-BDF2-B7069DFE7203}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{06A8B082-C80A-4460-BE10-B5EA1B5BD9D6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0706112A-F38D-4C7D-A774-5EC1E89B3D88}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0727C14C-A0E3-4EF9-8E59-FA270300F0E4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{07531E5F-18D9-42C3-9756-7CFF76A1513C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{075F4348-64ED-4F2D-8542-57DE3EBA4315}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{07997C12-B758-4CDC-B4F5-DB0086E91761}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{082ECD4B-FBC3-46BF-A9DD-3BB347EDB727}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{08A0CCAD-EC31-4732-8757-0830B60A4C25}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{08E1A795-FFB8-4A80-A17A-A88DF4F1BEBE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{093359F7-1F65-4731-ADBC-9A996300719D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{095CDD67-5209-436A-BE0E-1C5E9327D997}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{09FEE921-145C-435A-ABB3-80CAE8502786}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0AA31F94-1ACC-41A3-A1AB-8DC5DA5D1FE1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0B509045-FF81-4E1A-8EA5-B9C95E3EC8E7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0C8E70E2-A32B-45AA-8E7B-8B22BD1D71E3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0C929A87-A7D6-4144-84DB-51FF5011DB30}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0CCBE27E-C80B-4823-99ED-1CF7FB232697}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0CE98F49-52EF-4350-8BF0-0F3DC3401839}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0D813599-D4C0-4E11-9D75-98140B5625B1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0E0334EC-252A-4462-874C-D3C433095FE7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0F1A445E-C184-4850-B6BB-DE28F5C949F4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0F1F6D1B-9B90-473E-9B54-2739E5B7F6D6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0F4D95E5-9E8E-482C-A977-1E16179B0E27}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{0F7BC824-8F9D-47C6-AE3E-07D11B3454CB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{100B6AA4-831A-469B-B6CC-EAA6FB519CD3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{105517CF-2CC7-4AED-B5D0-63A1E635F154}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{10A5B743-6533-4101-9627-CEE83F822DAE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{10BE55C7-684E-44DA-A4C1-88D576481075}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{10EE0DFF-5B69-4B64-BB50-9887858ED7F1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{120430E4-EB16-450C-8964-33FE44908E7F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{124E5F47-4528-4F23-A221-52FD8F745190}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{128789BD-5D3F-4C2B-ABF1-0D99F2453388}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{12DDB911-A84F-43AC-B544-8BC5D98FC057}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{12F78708-240B-4CF7-AF52-AE7DA70C5671}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{13437FB5-1EF8-4F7C-BC33-CE1B02C7331B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{13489A46-3824-4DED-8DA6-D133ACA16A55}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{13771EC3-CDE3-4524-807A-00DA2A597104}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{140630AC-4CE1-4F9E-BCD3-F9DFC42A6271}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{14128288-3D37-4EBD-A2F6-02A547160A6E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1422B426-D1D2-4D69-81EB-3592D0545833}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{142FBDAC-8FDC-4125-9E4E-AE2BA8EB6BE1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1483DE56-4ACF-4E83-8A83-6A83FB02E47D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{151145C8-0A32-4739-9646-90C539CC6ADB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{167C45BA-5DB0-42F9-8D95-C902BD3128F7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{16C4FFF8-C2C6-401F-BBF2-C88951E33A84}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1701A416-4BD9-4916-84E8-0CC2B50F8F25}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1769E53B-84FA-4523-BB0A-2498D5FC3BE7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1795746C-7DDA-4A46-8EEF-3B51C8A14AA7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{17D837FB-7BC7-4E06-A28D-60A3CBD450E9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{18228CB5-F507-4320-A910-EFBF424A6393}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{18463FE5-9C98-4F7E-B915-C5655C9F987E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{18C15ABE-B088-41F7-B75A-C0420DDC813C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{19192BFA-8E4C-4BAE-AE6A-858EA5461B37}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{196C974A-66A8-400C-9491-1DEAE1D8A106}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{19BE497E-52C1-4881-9BB2-04702C33AF21}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1A99D5C6-35E4-4CC6-822B-4C597FD19270}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1AC1F963-8B4B-4D73-A323-DE72B148A9E2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1C48CA38-6199-48A4-B1D5-1B0BC7073C88}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1C914C9D-ABF4-404F-87AB-2B60CCA94255}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1D1FABB3-A6D9-4E18-BDB5-8D9B8C8DE7A7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1D896F73-41B0-4278-81F5-48B30664F024}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1DDD248F-7E6B-462C-9896-78BADFE20383}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1EB99ECB-E16B-4397-8F12-03F7608BA8FF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1F01711E-4DA7-4756-8488-D5836BCD48E3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{1F8B3055-51E1-4376-82F9-0303BF785632}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2004125B-4C8B-4DB4-9ADE-C9BF3D99389E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2050A978-171F-44CE-9FA1-E313319318E1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{206B3CBE-6CC8-48A5-BBB9-49C686A8122C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2096D87D-56BA-4C56-9205-6D262737BE4A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{20B07469-33ED-4146-BF40-01C6DCBCF8CF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{21764BF0-E583-4B17-91FB-5B086E41DD39}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{217E8F81-998E-4A29-8E84-595464FA9D60}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{21AAD709-2558-4C90-A5D6-31B231DEB70A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{21AF1657-6215-46F9-BEB7-84D7772F5399}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{21FF0D5E-39C3-4484-8E23-FF205CDC9E70}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2232DF1D-41AF-4499-9101-A07EDFC3413B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{223661E0-2101-4F91-8067-1A23ECE63307}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{240EBA74-27B4-4A83-9850-681AB679C483}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{24365852-62BE-44FA-89CE-1EA19AEB8F7D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2453664D-B0D3-43F0-9B2C-4B6034C3104B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2483E1F4-F61E-453F-BFFF-D4942BA47E49}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{24918950-F0D4-4BDA-BCEE-CF0F5C627C29}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{24B36F8D-CB7C-415D-BD06-BD192E84EF24}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{24C3F186-D329-41E9-8B04-8E40E95FAD42}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{24E760F6-528A-4AA3-9CCA-0882931EF605}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{25338165-E9E5-4276-B5E9-6FB5BFFC94AA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{25679EFB-C2FB-4EA6-88A7-8ACD288F123B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{259D16BE-5258-4917-9C78-EDAD52923C52}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{25CE1273-BD0F-48F8-A819-0BBE2E681AA9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2615F385-CCBF-415F-8905-4C13604D1556}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{261626C1-B56C-4A65-BE83-22F144B887E2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{261A9C7B-EDF3-4909-9E7A-8BE881C819AB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{263CC91C-5F8B-4F3A-A7FC-E4309D854B72}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{26AF1DDA-D862-40A5-AA62-98172139A067}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{26BB5964-D6E5-474F-B56A-DC47F6393CE9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{27223F26-30E3-4DCF-9111-852728429212}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{27902D13-DAAB-4307-9DE0-2F417B296D01}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{27B37840-3D6E-425F-806B-32D5FA7569F7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{27DC4C86-2163-4C47-A964-DE197C7FD901}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{285B1E1F-710F-45EB-A222-DD51D76DFF07}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2888286D-73BA-4749-A37D-0DCFD9E18FC2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{28C77385-F4BB-4B79-A403-F18F5512437E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{28F85D1E-8496-4B66-9C55-86640736E20D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{299E47DF-B09C-4BD3-800B-9D914AB72C4F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{29B7C049-4469-4B9D-B6D6-D07AB302C770}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{29C6F10B-8C26-4F1E-9260-19A83338B44B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{29DA44FB-55DA-4548-B720-EF74520E4F76}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{29ED67C2-91B2-44C9-AED0-D642523B1FE9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2A11D6B6-D539-44C5-B17E-C8E2391A32FF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2A191816-6835-4B1A-B10D-6B312F0C5077}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2A799F98-F53A-4F4F-8099-A9E9DBA86DFB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2A83FE87-90A6-463B-A37A-A0C23A5BEBDA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2AA56BB4-E719-480F-B49C-916509C08B8F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2AE5AF79-A53C-4CCE-8422-BB700FEF6AE6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2B7DB04E-BDFA-4C37-96AA-261A9A323D8C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2C35D402-6CEB-4DAC-A5DA-73764EF4BC2A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2CCC9774-F429-4639-A69E-F2482DB51783}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2CD47970-34E3-4368-8300-D29D8AC732E3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2D074E0C-82FC-47E4-9AAE-E12D19ABAD1B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2D2F9A38-45A8-4A10-9653-CF6B31DBE729}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2D9A8B19-7AED-4865-B5A1-79C5B4EA75CA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2DA40598-D93C-493B-A57F-CB1DDF397DBA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2DC4B134-1295-41F3-8AA2-FD0F1B91E0E3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2DD44E54-52C0-4C60-A4AE-F3DBC62111A5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2E5183D9-CBA1-498D-9A6F-75526595BEE5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2E761002-B37A-42D6-B8E4-A095CF78C463}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2EA744C2-B925-4760-ADC8-D23BC0C64474}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2ED32EE7-22FD-4223-A54E-4261C406E23E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2FE8E666-E129-4AEE-B800-7F5E47AA9123}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{2FEDB84C-6F04-421A-982B-708FB2DB470A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{30666EC1-BFBC-43EC-92C0-C74E7BDC64BD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{30AAEDF9-6A07-493E-96D1-5E491876B2C4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3236088A-B896-43B8-A066-D2EE7E819F01}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{32732C21-29F5-4D6A-A166-8F36D8E1E97E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{32978338-BC59-421A-8B54-BBC6B14AFF31}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{32C06E69-32E5-4660-B1FF-AD56D3ED474A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{33162D07-E7AA-401D-A299-2F2E3024B260}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{33948A03-690C-4375-816B-6D325F951697}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{33C0DF92-0E14-42E3-A9CE-744DDC6887AE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{33CB51AD-9672-4C82-99FE-ADFD1FE21757}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{33E824DC-E5FE-4BD8-B9F0-2BF29898E8F1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{35704258-2ECD-49CB-9584-E5725BD4FC82}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{35B3A412-D54D-4395-9C54-AE4A889D7CA3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{35CEE586-0393-4924-B62A-5F27C8BA6D0B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{362E4AB0-311C-4AFB-8694-42C8F832A660}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{36587E2A-A63D-499F-B6A9-39E8711FA292}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3658AF70-1DE0-464F-B956-8ABDCE158EDA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{37231D1A-9424-4268-898E-93A18D30EBB6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{384F2A58-815D-4368-90F6-9078227C8AD9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{38616603-29F0-4FE8-80EB-E9682D830D64}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{390FDF64-06E5-4CCD-977A-FE57F0E42941}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3A437E66-F0B9-4199-BF51-F67A052F5106}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3A4951C1-C149-478D-A0C6-4206F70F4EF7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3AE8AB05-748B-4A28-A1B5-53A98EB05AD6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3B3B6BF9-34F1-4B90-8490-F1951249DFBF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3BA94E14-5BFE-4FC4-B0A0-C40424D39BD8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3BB0179A-CB49-484C-ADF4-E8479D6C0772}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3BE95A9A-B746-46B5-8E24-C02981708892}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3C0D0307-2A29-470C-91A4-7FA9C18B2FAA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3C1063C1-F0A5-499D-A04B-968DC668B0A9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3C44C81A-BBFD-4A20-A0AD-5A36FC1E56EF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3CA5E689-6D2B-48EB-8CE5-51DD94B3C06E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3CCA1C0F-70C3-4411-80AC-6DBF1872531D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3D0F6994-4AF8-4FE3-9898-764D16E6DD95}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3D1A067A-B2E6-4729-8498-4BD40742CC15}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3D88031B-D6BD-4344-85E3-B22A7636027D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3E1E5785-3044-43C3-A7FE-A74267B7F82F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3E3468DC-4DEA-4430-8BCB-6E90DC220360}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3E37088E-DB6B-40D0-B929-A5C67A846DA3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{3FE7BFD0-1A57-4CDB-9BB3-393C4E4C85BC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{409A7317-621A-4EEA-A7D7-1F65BF8E0FE1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{419C87BD-CCFE-4178-A66A-B12DF981323E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{41A7E787-ACE6-4BB3-BFD7-32C72B08B8E5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{42AA1792-09AE-4140-B61C-59F7EC03C03C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{42AEB0B5-6A34-4789-968B-D6EF655DD415}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4311D2FA-8616-4276-B40B-06DC70E03572}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{434E67C9-21EE-4762-A844-C768ED07C49F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{43684008-CF95-418D-A89A-50926FD6AFD9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4370D51B-2AF8-4AF0-A45E-C0B496148607}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4405B9B5-77F3-42EE-AA39-DE05971CA20F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4436EED0-D7C6-4E29-8BFB-D1A3D539144C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4462C7C4-C9C8-4D92-A520-A237175E5237}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{447FEBEC-EEE4-43AB-B85D-3610B2917CCA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{44BCABEF-3436-47F3-A9B9-354C6E2DA9B7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{44F8EC65-9983-467D-9199-73F5105B5182}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4515A578-3E9B-4AC8-BB55-B7BA2096CF4B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{45706DA7-FE3C-417A-8721-9B38611D454C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{45DFB0FC-F8E8-4B5C-BEEA-77B10E8A6F84}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{45FD8F84-5531-42CD-85DB-83910F7228F6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{46077685-26DB-45F1-8753-1A74EE9F47D7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4622C071-1BDB-4DA2-AD10-4F16354BAF92}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{46F113AC-B100-4227-95FA-6B487668A478}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{47CC9404-FB9A-4695-AAC9-2D53A7DCD433}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{47D14B9B-B023-45F2-81A1-1D5147764490}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4865EB13-EC0C-45ED-83A9-541DF4FDA32A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4876163B-869E-4C06-A85D-F1D1F4B279F2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4976756A-9E10-4703-A1EC-738A8AA588CA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4997FA8A-6B4D-4E9B-B053-E90800170C12}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{49DFE89F-2435-4D79-B2C8-087E12B9D19C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4A42DF78-64E6-4E00-BF87-0B210DA2D52C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4A65C351-99BA-4435-9C83-0CB0DF9E4D84}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4D5BDEC3-80F9-4719-B204-3FA4D3C4D0BD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4E35A6FF-C7AE-4ADB-832D-2F2A16E1FE0F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4E8C02C2-F288-4D63-BFEF-B583EDF3A7A2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4E98255B-A96E-4EE5-9A5B-B2E02F4B24D6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4F25600B-0FAD-4775-8520-640D9F452AC4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4FA09282-4D93-4919-92DD-43B121A104CB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4FD1A0FF-C096-41F6-B640-6C0D94F59B4D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4FF22710-0E57-47A2-8816-1E8B935E3BEB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{4FF95A74-41F1-4A06-BA75-9F55FBE911C1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{517C12F3-3372-4C55-854E-386F462B794E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{52FB44CA-9AD5-4938-B8C5-4E8A5645DE09}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{531A9059-4AA7-4340-94DC-6A22881D2BE4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{532C96F6-D764-41D4-AC27-1540003A630B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5340DF37-2944-4FF6-90AD-DBFE3F57870E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5375C551-271D-4D0F-90FF-59C8C10321AB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{539669F0-C29E-49DF-A94E-3A74B42C9736}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{53A150F6-4C7A-411C-A161-9A6FAA57E667}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{543AACF2-E21C-454F-9FA7-62EB802820EC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{546051B9-1A74-4A04-B408-3BE05E9159B0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{54CA8F2B-6D07-4E00-B06A-E2FEB6211206}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{54D61BF2-F93D-44B4-AEE9-139A7B7BB03C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{54D6C2F1-50FA-4972-8AC2-37868CF39667}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5753E2F3-7FEC-4798-83F1-DFB8B53C36EF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{57C405FC-45A7-4067-A12F-B79F6C7EC7A9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5802254F-2CFF-417A-959B-0564F8E25E6D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{58307C3C-D340-4C27-B1A0-CBDD256038D2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{58AA605A-3A14-4688-8074-0633F9AE9465}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{59E56094-CA6D-4DB8-8881-FE409A6779F8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5A0392AF-0E99-4E6B-98C3-EFC77E5EFDDF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5A4426E3-80F8-4CB8-A9A9-E8161B947BBD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5BCE7617-6ACE-4C55-9ABF-2B32AE0DEFBE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5C680D7D-0419-44E6-A809-2534DB96DB30}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5C794845-99CF-4BC7-B810-571D4D138582}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5CB7DE72-7C8D-4C12-AF5B-DFA58DB279BD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5D5701F8-89B2-4961-84A1-5D41C4C3C7F0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5E4A897D-EF51-40B7-86AC-8B330EBE1042}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5EEBF241-C342-4ABE-8701-437CF2D0B17D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5F0BA129-EF44-4DBD-B959-4A737644C990}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5F314DCC-0EF8-46E5-B1AD-866D9ED369C7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{5F59E32B-ABDB-401B-A92D-9129A642E70F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{600F5D75-1161-4991-B03F-78B116055488}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{603761C2-4047-46BE-B8F2-0EBB4A4CB9AE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{60C7F9DA-4E6D-492A-99E7-B6A65B711742}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{60CFF3EE-A1AC-4F09-8517-28A5881BDF44}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{60F002D7-9D70-4DE4-928B-686FF0A7474D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{61AB1899-8DB8-448F-AF10-E8E5422840D7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{61B846AD-37F4-4B12-BA0A-AB444413DC15}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{621DD66B-5EAB-4B8B-83DC-E59DD2E2FB4A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{623E0A36-3D73-4053-9147-DEBB262EA300}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{627E2048-09C2-46B5-A242-BD9807062528}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{62AA4639-0274-45F5-A5C8-D2144CFD6E9A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{62AAEEBD-B369-422C-9917-32AAE8601AB6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{62CD3F97-811E-40F9-BC05-A928D7D68FCB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{64061992-8D0E-4CC4-BD80-B81236BBC5BF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6424F035-F979-4F06-802B-3DF36309EA2B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{64268C95-0EC1-476A-AB4E-AFC3D4322E77}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6493D2EE-F07E-46E1-9939-534B0C0571D7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{64A97714-3045-46C5-8B50-2E1EAC7DE1B5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{659DD5C2-6F5F-4640-8184-E25E25196628}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{65A693DE-AB37-4E33-82A6-F3E3DD423735}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{65B05C4D-B590-4DC7-8C9E-6B8681B0DFB3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{65E6354D-2B48-4147-967F-C1E9E2F0ECF9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{67FC834F-8448-413B-822E-FD32F2AA3C1A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{68847E82-C2A0-4B7C-9018-85E2B722BB4D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{68968AFB-7768-45EF-9DA9-773BE807715F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{68B2DCA0-31D5-4357-975A-FF700FC3D80D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{699565D2-D229-4B4D-90E7-0AB3D3D1EC2F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6A214566-00E6-4A29-99E6-862A67035357}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6A55A499-B5F5-44AF-82B4-1723C5330AC9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6A5AD2D6-432E-431F-8100-7CD690D6BB49}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B0D0711-F93E-4B65-823F-3E10E3921A95}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B52B579-39C9-49C3-84D2-023EC479E41B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B7160C8-1B43-4871-B836-75D5A8E38D56}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B745399-9FA2-4452-B4C4-5C945291BB47}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B7826AF-6047-4163-B309-9F16B06079EE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B811F20-20DA-45F1-8537-3A0B8A196757}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6B817CAB-8316-41C6-BF49-F8C25ED5C40D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6BA77C09-E1E0-4C8C-9BFB-2F0410B5DBD0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6C1EC8E9-F075-4B38-AC8B-91D0DC5D30A5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6C3513E4-2066-4F05-B79C-7A03318BBEC0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6C374164-23CB-4AC8-9DF0-22269CC86036}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6CA1380D-DEE1-4CE6-8EB4-A5F65B379C38}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6D753E2E-959B-4990-8A42-1C07BEB4935F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6DAE4A4D-AF8B-41A9-AD15-C5265987CF82}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6F133A20-3BD6-4C2C-B7BE-D09E7B6ACEC2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{6FBF810F-156F-4DA4-9916-C3031520E702}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{70519F96-5235-4B04-8983-A8AC3A38E049}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{70FB5DD7-3943-4CD1-84E1-3AC4E00B8005}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{710546D6-9211-456B-A4AB-88B47E45F312}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{715EEF9F-DEF3-4126-A44D-4590D6634E27}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{71EDBFD3-1784-4855-B80F-EF6147777334}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{739A762B-BE3C-40CE-8192-C98F69DA4EF0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{73CB526A-0A5C-4F03-BE42-7377DD40F902}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{73CD6A9C-E865-49CA-957F-AD4AB178761D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{73D6FC42-42B4-4BDB-AD20-B05592873E13}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{73DD9FEA-69AC-4DBB-8762-9CB5FB29093E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{74515452-ACF6-4F75-9771-F6F52537A3E7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{74A9985D-6255-45B2-BE1F-E5C9ABEDE300}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{74F85923-CD05-458E-9708-747577F5CA0A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7580C4AE-8062-48E1-A7AB-FBBF75E0D8F5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{75960BBF-EDE6-4A0E-809B-0542628D924F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{764CF881-5571-4631-B139-253B04E25E14}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{76564D48-F31B-4F3D-BDA3-A23042CFDFA4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{76B7EC23-15D9-44F5-9C31-7A2A45280194}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{77656733-80B8-4DC8-BCFE-675B52D03B07}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{783C8A08-3D1F-42C9-9C17-1F4AA7144107}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{783F38CA-3F06-435B-AEA7-498F8D4614F8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{78426E5A-E918-45AD-90C9-492E5A033805}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7863E01D-C0B6-4B9D-9CE0-019D91217244}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{78C61BBB-A97A-4620-84CB-56C7C9A3E56A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{78D60FDD-D85F-43B2-86DD-C8C0DD032A3A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7908C145-0363-4B3A-90FF-582070B720F4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{795AE720-42FB-48C8-891B-D1EA6A2C0B75}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{79B201B5-9414-4813-B413-66D6ACEE45A3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{79C0BC34-962C-4232-A5B5-1A62A97F7596}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7A1BACBA-7F0E-4288-8AEC-31D3476A6186}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7A344395-FDE5-43F9-A73D-615AED4BE299}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7A3A0980-37BF-4AF7-8D28-CEE14029908B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7A5B61AD-58DE-408B-B116-CDACBD7D6FFF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7A879908-C5E4-4E87-AA5D-D4312784D9F9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7AC72DAD-1A75-40C6-9F62-497F8C9C2F7E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7AEE97A6-792A-4EBB-902A-5C2ED7E4C308}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7B30154A-72E8-4E67-AC0B-86BCE641F760}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7B87488A-6EAB-4E17-9B67-07A34FDE0ED7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7C1E62F3-E194-4AD3-8E8D-BB6F05192A80}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7C9C0BF1-BE93-4111-894F-2A914D201B99}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7C9E2AB2-3287-441F-9A8B-E46715345B36}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7CFDAE92-2265-4B58-9C31-3828A09470E7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7D01F91D-736A-40A3-8B6C-6D1C59371C02}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7D30F8AB-AFC1-4B57-9930-56951F83ED27}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7D8742D6-761C-4CEC-8FB7-064285494BAB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7E7DAD90-DF4E-4D6B-ABAA-B8B1686DD127}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7EE1F65E-C592-4DC3-9130-E31EB8EBAF20}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7F023EA5-F799-4D74-A513-4CDDEFB29A95}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{7F93D9E7-AC81-448B-B845-1C19623BEFAB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{803D98D8-1CB6-4C22-9D01-FE14B1B18DFF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8072D16B-0852-47DA-BCB8-3FB2A43755DC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80793772-8C43-4A4D-8DF2-647DA55F0D4F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80860B68-8C47-4FD7-93FB-2D2FE237B3AB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80AAF853-E84B-4887-B589-80D9A4E831BF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80E2665F-EB6C-4D2D-A42B-261308D21E44}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80E9519C-80D1-4648-85B7-54AFE036E33E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{80EC2520-A48C-4CC5-8690-6F593A013808}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{811BD657-C8A7-4769-B6C0-DB8C6B3B345E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{816AA1F1-4F23-4CF7-86E6-F8E7644D1C8E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{822C33C6-0B40-4CC0-BD4A-FD7439A80307}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{829CE7C1-408B-4A12-B9E5-5BEFC93A4234}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{82CA4895-B141-48DF-BC8D-F2EA32104B3E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8332C2CB-4404-4656-B6EA-00FFB841DFE6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8377ACA0-3091-46EF-B9F2-181CD96A4D59}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{839AD845-1E0F-47D3-B9AE-9782DB15BA75}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{84A13B83-B20A-4E28-87F4-862BBE961EA6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{84B6E3B7-CF98-450B-B830-3DE1778C8604}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{84C0F7BD-6EDC-4225-9E05-2A8E6808500E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{84C50378-FC8B-48E6-BEA7-321949E508F3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{85D2CDDE-D53D-4232-AE11-2CB31DEF75EB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{85E9D059-D57A-4D38-A6A5-D22AFA7B2C77}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{864FDCDC-B0A7-4BC7-8F28-834C2D2DCCCB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{86961002-C876-4D55-A9AE-AB23FE698FA8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{86C0F50F-7BB8-4C91-943F-EAAB3FEC1E05}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{87145120-123C-4500-92FE-E71C191B929D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{876764A8-F4BF-4C97-BE13-0E772B2FEA08}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{87958770-1666-450E-9C9D-BB3A7117839F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{885E78E0-5E21-4D09-8BD5-E2AFB8F1BB35}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8892507E-6010-4D6B-8613-5745CB1A496E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{88C3B4DC-4B87-4A4E-9C67-E4CD6DF5D43D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8950A721-2DE0-4A48-9C82-BC7B8F26F30C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{89EA97C4-9C77-422C-B2CB-044BAC601FAC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{89FC85FD-53D0-4C3A-B382-A572C959FFE3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8A7B7412-4581-4ECB-92FE-942685577032}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8AEF048D-A41F-4823-B857-DF899BDE31DF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8B4A6B32-11D8-40D2-93F6-0FFBA81BDC48}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8B84CF48-71B4-408A-9F2E-8973CC1F20C1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8B861253-24EB-4AB0-B724-4A3EFAA7B9C1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8BF0FF6B-9542-467E-A4A3-BDB71A6C412B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8C6E5730-E9F0-451C-A6DE-D89C3F7B4B57}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8C94E9B2-85B2-42AE-B25A-D537BD701052}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8C9F2B5A-1591-4410-982C-FECD4311A64F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8CD16464-43E6-41A2-9DBF-A7BA9CA336AD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8CDDEB8D-DE6A-4001-94FD-37F0B40A8497}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8DB18DC6-266D-496C-9D54-4DCEB9179D93}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8E08EA2B-B675-4EA2-93E1-CACFF5652090}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8E2F9605-9A3B-47A5-87BF-86B3128D29AF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8E9B3FCC-FEA4-42A2-A23D-E2DCD171F2AC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8EABD116-B600-4274-B9DA-41461542C2A8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8EB33CDE-A54B-4561-84A8-B0ED05F50773}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8EE4665E-B6C0-4363-AD9C-377370893A88}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8F37AA99-B0EB-458E-93AF-DC9E2CB109BB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8FBDDE98-7EE7-4EFB-98FF-6EFF05A02106}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{8FE16CEA-8AFA-4386-A469-F9D7E1F5740D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{900C9F5E-F961-4015-BF71-7EBDC9F45404}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{900FE1D8-D7BC-4956-BF62-51C0A943193B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{90D4237C-5B2B-4E95-A9E2-A119AC78E0FD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{91196C57-CA71-46FD-A310-3A463304FC58}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{912B0BF0-B3E3-4687-AB55-518A60D4B1E3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9137E9BB-2F9F-4336-A215-A291073C301E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{914082F3-A6F4-433C-BE6A-E0954E7059BE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{91F08A0A-84B2-400B-A616-0253D7DAF220}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9273796D-3EDB-4432-A718-3C8579EA204A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{92E71350-FB2B-43DA-949B-61FBABA65352}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{938723CB-CCEC-451D-A9BC-2DDCD4D47367}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{93B804D4-0E11-406B-B902-5733BE1FC29F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{94906FF3-9DB6-4AB2-9A47-A2747F7EBF3C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{94BBEEA9-2CF1-4547-97A1-6EDC2E16A81F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{94BF9C3D-E6B5-4E40-8E6C-6ACB23E98BA6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{94FF14F7-4F52-49B4-87E5-0B5E928DB794}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9500458B-2317-4211-AB76-EE5403579268}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{952491DE-01FE-4C51-8D83-DCE8E683057B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{957938C0-12DF-4797-9866-5E0DB43CB1DE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9583AC39-CB56-4DAD-982F-B0E31C4B29DA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{963148C0-FAFA-441F-8BA5-88FB11BF1BE7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9777F041-270E-4B4F-8BE9-496926510ED9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{97979756-6C34-4A92-8A30-403D3ED8A04C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{97E2E8DF-8A03-429F-9603-305FF12D1010}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{98387E33-4E37-4162-80B1-059470B19F4A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{985990B3-34ED-4A80-B583-CE93F24B2D11}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{98C1C913-D8EF-4598-B1B7-151E3E8DFB8F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{98D23ADB-4F5E-40FE-9D63-B09DC9DCEEF8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9956D4B4-C2C5-4986-A505-969C0BC7F22F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{997231CC-A299-4731-A5E7-CE5EAA80951C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9A596F64-15E6-452D-AD4C-4B5C357E3C98}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9A812E26-AE03-4112-87BF-3BC4E936188D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9A984BD4-E451-4AAB-B211-05623B79F558}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9B03A211-276E-4F71-8B52-EA0310F71AF6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9B420A02-2095-40FA-9EC2-CC167B8D8AAD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9B5F7589-F4EE-422A-99CE-A2181730670A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9B95DBFE-E3EC-4051-9754-F45CE4D7D171}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9C04FD63-5CEB-4B5F-9A2F-D440836B7421}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9C591327-4E5B-4BBF-8546-0340FF392739}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9C742B3A-3ADA-4780-96B6-9DE52B3AD344}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9C8370E9-0743-4398-9E6E-50055AC0BF1A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9D294C56-C4F5-474E-B462-41C23DC3E5D8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9D5A8F57-9ABF-40DD-A6D5-B08764B209E2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9DD639AA-D1B3-4CC9-9BF8-A59B011D7BFC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9E693AD4-04CF-4BD7-A77D-57DD66CDE319}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9F7FB76B-9F34-4950-B104-4B11B41C7051}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{9FDB5360-10F1-4398-BE5B-352863D1F842}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A045AAAE-559F-4CD6-9643-CB68D3AEE7AA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A0AE18E8-DF9D-48D6-8333-0529412AB409}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A0C0E5BE-E679-4E8D-A1BE-6280D30397C4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A0EBEA46-FB40-4348-ABF9-9649CF82A3FF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A1301837-F5F8-4CDD-A3D3-A266098F556B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A18B9233-8466-4D8D-B16C-C0124E0F04A2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A21F027F-3F09-4F71-8B0F-C49503B92E49}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A30302E8-98CD-471D-A7BD-FAA17875828D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A351702A-FB39-4147-8808-C096A90E90C7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A422CC9D-A035-4D32-AA65-5FFA6E77E125}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A4238F4A-FC85-4C7C-A91C-03DE95F867FF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A49412A3-64A4-473C-B27A-0ECB9B953821}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A49BB996-AB20-4D8E-9AF2-057D719EAA32}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A4E880A4-75A9-4824-ADCC-89A10F807E0F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A574EC87-90F9-4785-B8B8-5E8B6518AF8D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A6646101-F915-4098-80EC-E746CC57CE0D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A66C7AF6-8044-406E-8064-0C95965C68E9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A6A430ED-E6F4-48FC-9524-D52E84C867AE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A6D32A6D-EA46-41E0-B7BA-A0B2F24D529A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A6D813B7-2BA7-45A3-A4B6-FB4D98F0EABC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A76BA56A-20A0-4045-87CC-E9E22BA78632}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A7C12C8D-75AF-4883-87B6-F572E66B5A4F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A7E3CEC1-AC25-4163-BF45-A90EF20242C8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A80384A9-6632-480E-B02E-DFE4A501A752}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A8CD8AA2-852C-4DC0-8C73-9B45BC32B272}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{A97993EB-E386-43AE-A3E7-BFDCC5996348}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AA70F569-16D3-4ADB-B457-72441EC77447}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AAF2DF2F-233A-4808-B609-A9B0D1094658}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AB6E6978-1A8E-4FD8-80F4-732058BB5B7E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AB94BE67-4A8A-45B4-80C6-0EDCF4A72C4C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AB997390-E4E3-4916-A7B0-A73F0E256338}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AB9F9D62-90E5-4539-B96D-0BB662C9A868}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AD11AD0B-FFBF-48ED-8795-1E91FD580407}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AD988043-FA1A-40B4-86E6-8BC5C21DD6AB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AE2B43B6-AC60-4768-85AB-41346F09A7FC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{AE8F792C-B5B7-45C5-823E-5880DD152F0C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B0B385D1-DA1D-40EB-B71A-28140AF63397}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B14D9397-1D9A-450F-8EA8-62E8FD664AFC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B1A819DD-96D5-412C-A9EA-A145405F177F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B20FF2C1-1675-40D3-B51A-AFD792444AF9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B23CA737-DB16-4FDB-9BFD-0175E4269305}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B28699EB-D1C9-4AF7-8527-60C8BDAE88BD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B2C1C721-77FD-43F3-9000-634092A1B29F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B2E33405-C6E2-464D-B34E-6B8A91CF8447}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B30C6605-BF06-49DB-9789-156D99B27E6C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B3253072-1181-4CEE-901C-8DED1ADAAA58}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B362CEB2-9627-45A9-9400-EE5694F344BA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B383D79D-4D4B-4A70-8301-EB993CF13BD8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B3A3841D-C03E-46BB-9532-38C7C8D9445E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B3BC92BB-DABB-494A-AAF1-2D836B43D4F9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B40832E7-74C0-4F87-8BCE-3B4DD211847E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B48C0982-64DE-48C3-9B75-782E498C60C7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B4AB0783-0FCD-4641-9580-6F453387EAB6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B4F37656-142F-4439-A964-CCB4129D86CD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B531086E-F990-4E61-8749-3D182A5D760F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B586ADFB-199A-4FFE-A5E0-B536F9782719}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B614A776-755F-4D3E-B11C-51C9EAF08266}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B659EDE1-C73D-417D-8CDE-6A7CD0BC0EB3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B6A62F4D-15E0-491B-B55C-B9559EAC9F5A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B7C0B602-7160-4EC2-957D-02A8A5A45181}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B866A887-8925-44EA-8ABF-5FBDBC39A524}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B873427D-6683-4695-803D-C1BE1E924876}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B88A545D-6FEE-41C6-A6B0-FAAC96B486CC}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B906A768-D9B7-4273-A49E-5C6C3A4E9C5B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B96AA835-B110-4371-A7EC-FBFF814485D6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B96FD9ED-3B00-4DFD-B5F9-2AD0C03CD641}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B984A31A-9CBD-492A-BA11-8C198331C182}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{B9FE4952-2806-4720-9711-CBCFF7D5EA29}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BA43E213-D09F-4E19-992E-0ED3C418E34A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BA572DE5-7F68-4970-8986-3BEFD10C699C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BA87ADF6-FC5A-4DE1-A3D3-A52D8B124F5F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BAB409FD-E184-4298-8A95-3356EA3485BD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BADB5611-665D-455B-8191-53A4655C586F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BB059E3E-D2D5-41D2-BD82-A29DFCA5C781}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BB36D3D0-64A1-45B7-8187-B81454A1082A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BB513B4A-31E6-472B-8CEC-8EC54EAAE946}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BB7833D7-FA94-4AB4-881A-186720501828}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BB96FB43-72A8-409B-B4E9-CEAB9CA3424D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BC81D84A-64C7-4A58-B19C-9ABF2F126932}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BCAE30C3-0DB5-4067-83DA-05453581883D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BD46FCB5-F2CF-4074-BAED-BC58C4626770}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BD64502B-2747-4FD3-8485-63B05885E40D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BE74F226-1983-42D1-93BF-849D11FF678E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BEAF3AC7-E8E9-4422-B16C-6D3F2E78FAA8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BF1AA914-0099-4F78-9368-4036B1D118A3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{BF6CF37C-3073-4599-96E7-8BFF9D3BC531}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C07A51DA-414E-40D3-A1DC-33D685A42218}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C0919C24-1267-4F15-AA92-1C58C8D5F38F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C0D3F98C-2BFB-440C-B51F-9C83B8CF26B0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C13ED58D-75E4-48A3-92E7-ADF32FAD3A98}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C19A6695-5CCA-494A-9F9C-F51705EB2CB0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C268B707-C5F5-42B0-BDE0-90CE808C585B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C30281A6-0C95-44C4-8EC2-98A7F1CFF89F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C322230A-F726-41F3-B0CC-E6E81CEBAFEF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C32B639B-511E-4108-844B-9BBEE030921D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C43CD639-AFC5-46FB-8C78-55C4676E747C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C4584457-FEE3-4CE7-93C9-A703291C4988}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C47A4CCF-7F31-4178-81F5-96F6368256B3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C501C070-4AE1-4091-9FF1-4E3414A45E6D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C5133B69-C0C6-4EDB-8BB8-FA64204A656A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C6066DD6-44AB-4DAF-9319-260E23792B9E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C6D0E5DF-05A4-4D01-971D-1517BDC8A395}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C8010048-0598-43A9-816C-50863E1D546C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C822EB40-7D87-433C-A902-1365851974C9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C91B02AB-1AF7-4984-83FF-B6E604598969}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C98B875C-10E9-409F-8BDA-BC3587F30F73}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{C9F6B1A5-8098-4597-BE4D-DED2A3705B62}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CB2E2E64-7383-4F5C-98ED-764EFD4067E1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CB45DC1E-7B00-4B38-90D9-F032FD6E7A0D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CB5631B5-CB0E-452B-AEF4-FFB5B9ABCBF8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CC85BFBA-EB94-4D9B-BC8B-A8C4FBD05695}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CCC17831-062A-4FED-B18C-851BED417529}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CCD963FD-362D-4BD1-8E37-4D2A3E7B378D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CCE4896F-3D7F-477A-B378-7DAF7E393DA8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CCE53135-FADD-4077-8D1E-F90411F1C71D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CD6E55BD-1773-4C90-9C58-0985FB1395AD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CD700138-C3D7-419F-BFEB-3DACF90DC801}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CE235FC7-DED2-401D-9A33-1ED778E5EC53}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CEB8027E-63C2-4A44-AA83-6F9D642D74B1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CEC6B840-44E5-4B13-AA62-CBDEDDEF585F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{CF65D084-5A8E-47C0-A037-09ACC09A507D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D02CF05A-77C8-4B4E-92DE-3C792171CB0B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D0625635-76A9-4B3D-A8DD-E7FADF9012D9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D0794D07-F8D7-478B-9FF5-02729523A834}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D1410C7C-42E3-4F63-97C4-19CD488C2D6B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D188140B-F8F8-4163-9A95-FB2D147A5549}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D18A0182-7004-42B9-A7A2-18AD17FE3E59}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D1E60DB6-7798-43D6-8957-B5B1D35198BE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D29ED3C8-E44E-401B-A8CB-C63154CDB4AD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D2BD7814-181D-4E08-AC23-569DB476EBFB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D2DC70C1-5B89-43A7-A122-51302DD79A55}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D30A55A2-C55C-4BBB-87AA-84493596B964}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D32524F3-258B-4223-8C6B-E166D3D9BCA2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D3669896-B439-4353-9E8F-0A998E81ADD9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D369D89B-B114-4BA5-98E1-00B0B27F7186}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D4B3C5B3-1D3A-48BA-9AA8-0868BFFB1B5F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D4C45692-0709-40FB-AAE9-39AD3D3ABA51}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D53621C2-0716-4F5B-97E7-B12482956C46}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D589837F-C1F4-463E-9759-8C63D1F4C405}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D5B4A2D6-D9BF-497E-8C32-AA48DCBF8A22}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D5B650A3-9CC4-48DB-9193-4F31F5FE3E9D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D63B133A-0A7A-466D-9076-68B59C8E88AF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D6C198E3-3124-4F67-AB0F-4F16C80C7EC3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D6FD7692-D3AE-4933-A9A2-FC5E6C866E1D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D75D37C1-2C75-4101-BE1B-6C6A9B17F774}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D8373DF6-3A4B-42A2-A181-9EF9D7E03E96}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D8B73222-CA95-4AAB-9FD4-9A77F3CC75ED}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D8C68A6A-FB05-48B6-B70E-1D3541E8DE97}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D8E7FF27-B06B-49F2-A839-3F84E64A9798}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D91E6D24-D615-4A8A-8939-AE1F1B9A1F6A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D938555F-A09E-4570-87DC-6301E44C3140}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D94D5546-A0E1-4F79-A247-93EDAA755B08}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D9687936-12BD-4CEF-A29E-80F49207F56E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{D99FABED-F060-4069-9872-6731243B0523}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DA269C65-3194-48E1-95FF-AC662C48B04D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DAB48A74-02E4-4D02-B059-C295AC09112B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DAE8D3EB-7367-40B3-B9FF-23CC11093E38}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DB576979-C754-43C3-9A10-88B3594C11D5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DBBD6A2C-D978-4CC2-A625-3138BC7CC63B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DC1CCC40-838F-443E-80C3-4FAA46308E57}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DC4DDB6D-68E4-4110-9B0A-00F2E37DFF3E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DC4F6FC8-02A8-4394-8273-C1F162864929}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DC74F9F3-17FB-4D8C-B484-0963C104A8B2}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DCBE793F-5938-4F55-86E9-D79DA08B453F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DD84C03B-C07E-44ED-95E9-A89725FCC617}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DDB9B46E-D1CF-47D2-BB8A-941939F1FA98}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DDC29163-351B-4FF4-9ABB-D8229FC14F66}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DDE66E77-60E4-45DF-9646-7925B557F98E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DE189645-EDF0-47C3-95B0-85F99CB4E202}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DE5EA930-B19C-40DA-AD15-BD3C1A8F980E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DEDF8289-9D7B-4203-86B7-5F393F65E6A6}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DF27822E-CD28-4808-817D-D67961EA248A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{DFE3916F-A5C3-4AC6-B7F3-E5C053D18050}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E09A35D2-07E1-47E9-A7DD-A5BA79DDC477}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E0BDAEBB-2D5D-4BA5-BE0E-58C811BA68FB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E191A17D-AE9A-40B6-AC62-3A110B86DF43}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E1C99F25-456B-470E-9339-1B4536B49568}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E24296E8-4978-4516-8725-6882D3A88E67}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E247FE13-0902-4517-9506-7721F387E576}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E412DD6C-3F32-4AB4-A0B0-79132307C989}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E41A3CC4-EC5E-4042-B639-A030766ACFD5}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E4EF1C99-8BB7-40ED-A6E5-A64A606836F8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E4FCA1AC-E6EF-45BD-B8C8-954DC68665AE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E52CF074-A511-49D1-A524-2F29962EF87D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E5466C80-3F41-44EA-9ECF-98832F7E6E67}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E57CC775-F783-4915-BACE-F88B7CDB6EA4}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E5A2B1A0-C966-4845-B89E-B1BC68CA6B9A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E63439AE-695B-4B7A-88C7-3358E636314E}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E6BBD0D1-393D-404A-98D7-9C0FFFBF4A26}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E6C32831-8A0B-4BAD-9210-5479228FCFB0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E7510366-0CF0-416B-AF8A-8948D2AA9001}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E7A8F3D3-2E11-40DE-A53A-B680D54F455D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E7C374F7-703A-4014-8876-8692F9F7104F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E84023EA-DB06-421A-AD39-29ACF4293556}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E866D0BE-B317-4231-92B0-E851B84DD1E9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E8A03D40-D00C-445B-8403-3BD26EF6030D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E8DB0EE2-8637-47C7-97A6-9872D9CC70AE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E9669AD8-2D18-4705-B5AB-646760B46E4F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E9A6EE3F-1035-4938-B3FF-7AB808EAA27A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{E9A94C3E-8291-47C1-8ACE-19ABF676B0E0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EA43CE3C-B9D2-46C6-92E4-45562F6FA4DB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EA49E1C1-DD01-4BFE-90BD-75194A871EF3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EA654773-D4B8-4F74-B6BD-603E84386E5A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EA68F98E-19F9-4A83-92E1-BF62E7730241}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EAC9C92E-1890-403D-8CC2-E38E93EEE181}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EB29B77E-2939-4108-A542-263F2B1A994C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EB3D4290-1FED-43AF-BF4B-DD19AF5D1BAE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ECD51E4B-54F3-446D-855B-AE680C36BEAE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ECDCD109-4FEF-48CA-9A88-FEDD2D3A2FEF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ECE86020-9C5E-4C12-BE19-34ED9A54A1BB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ED3BDCD8-1E1C-4921-A72B-1A143937B95D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ED3D25FF-1DCA-4097-B4F9-8B6C10BCE3F1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{ED9A01ED-C13C-48F4-A04A-3567148FD18A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EDA652C2-3E75-4056-AD66-DB36119FA630}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EE9654FE-6989-4F04-9BD6-178BFF98F1BB}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EEB0033D-0A65-49C2-8666-A7D1FC849C01}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EEF5B900-1B84-4D90-8CBD-F9985D0A1C67}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EEFCB54E-DA80-4AC4-A2F8-C94A5111E589}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EF58BF7D-3828-4969-9E9A-32B60A41AA07}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EF7A33A7-4257-4C2D-B15A-E64309758B31}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EFD1A845-75D1-4B61-B103-C96F527B7A6C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{EFEC7A59-4787-4A56-8900-F0AAFB326AFD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F02E2749-CC69-4C4C-8279-75B14A89D21F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F0923CCD-C386-40E0-B478-44B6D923BB7F}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F09699EC-5581-4066-A247-8B9C3FF525D1}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F0C91405-8983-444B-A56D-F431798B46B0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F1806299-65C6-4F47-B367-201F96839678}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F18C7FA1-E355-4823-8965-04B20F4D01C8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F19CED40-9B7E-4ED5-8840-1ABECB147B0B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F35E15E3-D9BD-42B2-804B-6F1ECB727D59}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F365BBC7-C65E-405D-9AB8-EDAF7DEDF0C0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F3DB8EAA-3B79-4D69-A389-C217FAF3DACA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F41196B9-1236-4DC3-893A-DE340187F333}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F463CB36-02F4-4924-936C-1484557AA534}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F4FEC57A-63C7-43B3-8350-716B24785987}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F66B759D-258F-4928-9C08-CC935265C7FE}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F70253EB-F652-47D2-A36A-5310E0094563}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F772210A-9161-45D2-AC4B-7B120D24A9B8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F7960A29-1BEF-4288-B8D4-B9F5E9252DE7}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F7BE0922-B666-4063-9C0A-17CB45554CB3}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F7CAF86C-5CF4-4873-9E01-BDE80B1AFE45}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F8625920-D121-4AA9-AC29-5785865A7CFD}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F900A538-D7DF-4412-8A69-E43B206DED8D}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{F9B4A722-5B13-463F-AB36-08FB435F04ED}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FA68266A-09BC-4D25-94C0-B2A64EC9708C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FAA07B55-A3C3-4B98-A201-BD4EED1814D0}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FAA9B2A8-D4FD-430C-87CD-93604E8201D8}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FAD186AD-94C5-4144-A07C-AB5BA9BDB256}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FB3D3FCC-AED3-4DF0-A36E-98666E802063}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FBDE45AA-7759-460B-88C4-AC017A65F2F9}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FBDF9F36-B13D-4041-B99D-CEB82CAA8312}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FC142CE1-D73E-412A-B6FC-4034E3276698}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FC62CC04-CF4E-440E-AB68-B98958216CBF}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FCE2DF6A-0F1B-4336-B1B3-F6B867D01D3C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FCFA5C12-A3F5-4857-86CE-43B49C5A8B99}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FD663BE5-AB68-4448-AAF4-66C41693945A}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FD829CE3-B992-4232-BD6F-FCB00E37D072}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FDD48814-01BF-46D6-AC0E-97DE2F85363C}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FDDBB492-9464-422F-B3B9-E6E28562186B}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FF23B3F7-1A19-4BE1-AEC2-7BD445743FEA}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FF3398B6-5CAA-4DAA-9847-7AD2FFDA4273}
Successfully deleted: [Empty Folder] C:\Users\Doma\appdata\local\{FF44E905-6A40-40F5-814A-CE47D4747788}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 12.11.2013 at 6:34:45,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


a log z ADW:
# AdwCleaner v3.012 - Report created 12/11/2013 at 06:38:25
# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Doma - DOMA-PC
# Running from : C:\Users\Doma\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\DownlOad keepeeR
Folder Deleted : C:\ProgramData\Download keeper
File Deleted : C:\Windows\System32\roboot64.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\Software\PIP

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16720


-\\ Google Chrome v

[ File : C:\Users\Doma\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3236 octets] - [12/11/2013 06:37:06]
AdwCleaner[S0].txt - [3129 octets] - [12/11/2013 06:38:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3189 octets] ##########

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Takže logy: OTL:
OTL logfile created on: 12.11.2013 9:45:17 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Doma\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,75 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 47,23% Memory free
7,49 Gb Paging File | 4,85 Gb Available in Paging File | 64,75% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 488,18 Gb Total Space | 198,35 Gb Free Space | 40,63% Space Free | Partition Type: NTFS
Drive D: | 443,23 Gb Total Space | 49,80 Gb Free Space | 11,24% Space Free | Partition Type: NTFS
Drive H: | 292,97 Gb Total Space | 30,23 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive V: | 303,20 Gb Total Space | 38,38 Gb Free Space | 12,66% Space Free | Partition Type: NTFS

Computer Name: DOMA-PC | User Name: Doma | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.11.12 09:43:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Doma\Desktop\OTL.exe
PRC - [2013.06.07 15:51:02 | 000,774,680 | ---- | M] (ZONER software) -- C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
PRC - [2013.05.10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013.04.02 12:22:07 | 000,122,368 | ---- | M] () -- C:\Program Files\Ubiquiti Networks\airControl2\lib\jsl.exe
PRC - [2012.12.14 10:17:04 | 003,467,768 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2012.05.06 12:35:51 | 000,165,304 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe
PRC - [2012.03.02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
PRC - [2012.03.01 23:59:26 | 000,285,072 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
PRC - [2012.01.18 05:45:28 | 006,849,248 | ---- | M] (3M) -- C:\Program Files (x86)\3M\PDNotes\PDNotes.exe
PRC - [2011.10.28 20:24:10 | 004,878,912 | ---- | M] (FNet Co., Ltd.) -- C:\Program Files (x86)\XFast USB\XFastUsb.exe
PRC - [2011.10.10 18:00:51 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.6\ICQ.exe
PRC - [2011.10.10 12:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) -- C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe


========== Modules (No Company Name) ==========

MOD - [2013.10.12 06:58:59 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll
MOD - [2013.10.12 06:58:53 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\0a7b20934d7587787e7dae923d1614f4\System.Deployment.ni.dll
MOD - [2013.10.12 06:58:39 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll
MOD - [2013.10.11 20:50:56 | 011,527,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\99bbd3424207d205e9e680fa712dba04\PresentationCore.ni.dll
MOD - [2013.10.11 20:50:52 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\6a71efa7248119b0875d6cd2dd1e204c\System.Windows.Forms.ni.dll
MOD - [2013.10.11 20:50:47 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\b1ff5e4a64c0bb0a9b039aaefcde5ea7\WindowsBase.ni.dll
MOD - [2013.10.11 20:50:45 | 001,014,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\85a501f8b0cb271f1bfab6532523ac3c\System.Configuration.ni.dll
MOD - [2013.10.09 01:02:43 | 000,415,184 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppgooglenaclpluginchrome.dll
MOD - [2013.10.09 01:02:42 | 013,584,336 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll
MOD - [2013.10.09 01:02:41 | 004,055,504 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll
MOD - [2013.10.09 01:01:50 | 000,698,832 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
MOD - [2013.10.09 01:01:49 | 000,099,792 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\libegl.dll
MOD - [2013.10.09 01:01:47 | 001,604,560 | ---- | M] () -- C:\Users\Doma\AppData\Local\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
MOD - [2013.10.08 16:00:00 | 000,221,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\d8f4106eee38420ac5eda7d630dc53fc\System.ServiceProcess.ni.dll
MOD - [2013.10.08 15:58:23 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\4c23035918febda08a22d63e1c177d26\System.Runtime.Remoting.ni.dll
MOD - [2013.09.13 06:26:26 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\3d075c3b7d099aca217beecac1f66b4b\System.Web.Services.ni.dll
MOD - [2013.08.19 11:34:11 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5970036570c1e44e8ae0f6f94c1039aa\System.EnterpriseServices.ni.dll
MOD - [2013.08.19 11:34:10 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4ada2213cefea889a5ed6e2fb6839b93\System.Transactions.ni.dll
MOD - [2013.08.19 11:34:10 | 000,280,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5970036570c1e44e8ae0f6f94c1039aa\System.EnterpriseServices.Wrapper.dll
MOD - [2013.08.19 11:34:09 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\764054efc88f51b54c8d7e44df26b671\System.Data.ni.dll
MOD - [2013.08.19 11:33:43 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
MOD - [2013.08.19 11:33:24 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
MOD - [2013.08.19 11:33:20 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
MOD - [2013.08.19 07:05:25 | 005,628,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b7285e9f3d19a05d5cc2c049e451685d\System.Xml.ni.dll
MOD - [2013.08.19 07:05:24 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2154273cb2d7a8b1a47d672b6d0808bf\System.Drawing.ni.dll
MOD - [2013.08.19 07:05:21 | 009,100,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\08c630893416f3379c9455870908ad6c\System.ni.dll
MOD - [2013.07.13 06:54:40 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\8c20095bd7d46cdfa7933eb258a07daa\Accessibility.ni.dll
MOD - [2013.07.13 06:54:17 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2013.07.13 02:28:16 | 014,418,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a01e07e47ecdd94ae099e8c4bf650516\mscorlib.ni.dll
MOD - [2012.01.18 05:45:32 | 000,226,016 | ---- | M] () -- C:\Program Files (x86)\3M\PDNotes\psnutil.dll
MOD - [2012.01.18 05:45:30 | 002,212,576 | ---- | M] () -- C:\Program Files (x86)\3M\PDNotes\psndbaccessprevious.dll
MOD - [2012.01.18 05:45:28 | 004,498,144 | ---- | M] () -- C:\Program Files (x86)\3M\PDNotes\psndbaccess.dll
MOD - [2011.02.11 11:43:30 | 003,721,728 | ---- | M] () -- C:\Program Files (x86)\Win7codecs\filters\ffdshow.ax
MOD - [2011.01.15 03:12:58 | 000,456,192 | ---- | M] () -- C:\Program Files (x86)\Win7codecs\filters\RealMediaSplitter.ax
MOD - [2010.11.20 05:12:59 | 000,113,664 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
MOD - [2010.11.13 03:00:59 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.05 02:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010.11.05 02:54:38 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll
MOD - [2009.07.14 16:17:20 | 000,393,216 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Deployment.resources.dll
MOD - [2009.07.14 16:17:13 | 000,077,824 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.Services.resources.dll
MOD - [2009.07.14 02:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\SysWOW64\msjetoledb40.dll
MOD - [2009.06.10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll


========== Services (SafeList) ==========

SRV:64bit: - [2013.08.12 13:11:04 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2013.08.12 13:11:04 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013.04.02 12:22:07 | 000,122,368 | ---- | M] () [Auto | Running] -- C:\Program Files\Ubiquiti Networks\airControl2\lib\jsl.exe -- (UbiquitiAirControl2Server)
SRV:64bit: - [2012.07.04 07:20:54 | 000,238,080 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2012.07.04 00:36:06 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2013.10.09 16:26:57 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.09.05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.05.10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.12.14 10:17:04 | 003,467,768 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2012.03.02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe -- (SamsungAllShareV2.0)
SRV - [2012.03.02 17:00:20 | 000,027,584 | ---- | M] (Samsung Electronics Co., Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe -- (SimpleSlideShowServer)
SRV - [2011.10.10 12:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.10.25 17:47:15 | 000,032,320 | ---- | M] (FNet Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FNETTBOH_305.SYS -- (FNETTBOH_305)
DRV:64bit: - [2013.08.29 02:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2013.07.30 12:41:19 | 000,350,160 | ---- | M] (BitDefender S.R.L.) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\trufos.sys -- (trufos)
DRV:64bit: - [2013.06.18 20:50:08 | 000,139,616 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2013.02.05 16:27:57 | 000,017,280 | ---- | M] (Scott) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBDrv_AMD64.sys -- (awUSB)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.07.18 13:58:24 | 000,132,104 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\zghsser.sys -- (zghsser)
DRV:64bit: - [2012.07.04 07:59:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2012.07.04 07:59:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.07.04 06:10:56 | 000,359,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.06.20 11:51:32 | 000,020,232 | ---- | M] (HandSet Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter_hs.sys -- (massfilter_hs)
DRV:64bit: - [2012.03.07 15:41:32 | 000,065,648 | ---- | M] (Fuzhou Rockchip Electronics Co,Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rockusb.sys -- (Rockusb)
DRV:64bit: - [2012.03.05 15:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)
DRV:64bit: - [2012.03.05 15:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.28 20:24:11 | 000,015,936 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\FNETURPX.SYS -- (FNETURPX)
DRV:64bit: - [2011.06.16 20:08:26 | 000,040,064 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2011.06.16 20:08:24 | 000,079,488 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.17 16:21:12 | 000,156,080 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011.01.19 17:47:30 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2010.12.18 17:33:05 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.11.23 17:41:09 | 000,230,352 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.09.29 21:19:58 | 000,046,720 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2010.06.17 10:15:36 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)
DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.12.17 23:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009.09.17 23:13:02 | 000,063,520 | ---- | M] (Siano) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\smsbda.sys -- (smsbda)
DRV:64bit: - [2009.08.09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2008.02.13 15:20:16 | 000,017,920 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Amusbx64.sys -- (Amusbprt)
DRV:64bit: - [2007.10.15 10:37:22 | 000,012,288 | ---- | M] ((Standard mouse types)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Amfltx64.sys -- (Amfilter)
DRV:64bit: - [2005.09.23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes,DefaultScope = {3E9BBE46-0020-4632-885E-BBCCFEC452D4}
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE10SR
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes\{3E9BBE46-0020-4632-885E-BBCCFEC452D4}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@software602.cz/602XML Filler: C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Doma\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Doma\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Doma\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012.04.26 07:27:20 | 000,000,000 | ---D | M]

[2011.06.10 20:13:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Doma\AppData\Roaming\Mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage:
CHR - Extension: Pen\u011B\u017Eenka Google = C:\Users\Doma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
CHR - Extension: LogMeIn = C:\Users\Doma\AppData\Local\Google\Chrome\User Data\Default\Extensions\omkjapkpkiciphacnalicgmmcelfolon\1.0.0.1037_0\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (DownlOad keepeeR) - {7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD} - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.x64.dll File not found
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll ()
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (DownlOad keepeeR) - {7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD} - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.dll File not found
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (WebTranslator) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [XFast USB] C:\Program Files (x86)\XFast USB\XFastUsb.exe (FNet Co., Ltd.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001..\Run: [ICQ] C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe (ZONER software)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 153
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 153
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Create a Post-it® Note - C:\Program Files (x86)\3M\PDNotes\\PSNBookMark.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Create a Post-it® Note - C:\Program Files (x86)\3M\PDNotes\\PSNBookMark.html ()
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..Trusted Domains: takata-petri.com ([portal] https in Trusted sites)
O16:64bit: - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab (Reg Error: Key error.)
O16:64bit: - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://31.133.9.122/activex/AMC.cab (Reg Error: Key error.)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/produ ... wsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} http://catalog.update.microsoft.com/v7/ ... 0595118392 (MUCatalogWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {97A54521-3528-487D-A15E-E6F19AD67AA3} http://10.100.102.200:8085/liveview-htm ... bViewS.cab (Hybrid WebView)
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://89.203.196.254/activex/AMC.cab (AxisMediaControlEmb Class)
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} https://juniper.net/dana-cached/setup/J ... tupSP1.cab (JuniperSetupControlXP Class)
O16 - DPF: {EC71A2BE-E211-41F9-BCAF-4EFF13426DFE} https://shop.rossmanncz.orwonet.de/shop ... upload.cab (RossmCZActiveFormX Element)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com//activex/ractrl.cab?lmi=1007 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.254.254.254 192.168.1.253
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1A5B3004-C627-49BF-BC20-EDB3B841B93D}: DhcpNameServer = 10.254.254.254 192.168.1.253
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{85e38ab7-42e0-11e3-9b73-00252225e630}\Shell - "" = AutoRun
O33 - MountPoints2\{85e38ab7-42e0-11e3-9b73-00252225e630}\Shell\AutoRun\command - "" = F:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2088.1.A01B06 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
O33 - MountPoints2\{9c06e4cf-0ac4-11e0-919a-00252225e630}\Shell - "" = AutoRun
O33 - MountPoints2\{9c06e4cf-0ac4-11e0-919a-00252225e630}\Shell\AutoRun\command - "" = F:\Autorun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Bin\assetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
System Restore Service not available.


Drivers32:64bit: msacm.aacacm - AACACM.acm (fccHandler)
Drivers32:64bit: msacm.ac3acm - ac3acm.acm (fccHandler)
Drivers32:64bit: msacm.ac3filter - ac3filter.acm ()
Drivers32:64bit: msacm.avis - ff_acm.acm ()
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.l3pacm - l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FFDS - ff_vfw.dll ()
Drivers32:64bit: VIDC.LAGS - lagarith.dll ( )
Drivers32:64bit: vidc.x264 - x264vfw.dll ()
Drivers32: msacm.ac3filter - C:\Windows\SysWow64\ac3filter.acm ()
Drivers32: msacm.avis - C:\Windows\SysWow64\ff_acm.acm ()
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: VIDC.CSM0 - C:\Windows\SysWow64\CSMX.DLL ()
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: vidc.iv50 - C:\Program Files (x86)\SPlayer\ir50_32.dll (Intel Corporation)
Drivers32: vidc.mjpg - File not found
Drivers32: vidc.x264 - C:\Windows\SysWow64\x264vfw.dll ()
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013.11.12 09:43:39 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Doma\Desktop\OTL.exe
[2013.11.12 06:37:04 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.11.12 06:28:00 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013.11.05 16:41:19 | 000,000,000 | ---D | C] -- C:\Users\Doma\AppData\Roaming\LibreOffice
[2013.11.05 15:57:54 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.1
[2013.11.05 15:56:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LibreOffice 4
[2013.11.05 15:56:11 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.01.19 17:47:30 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Doma\AppData\Roaming\pcouffin.sys
[1 C:\Users\Doma\Documents\*.tmp files -> C:\Users\Doma\Documents\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2013.11.12 09:56:00 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job
[2013.11.12 09:54:05 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.11.12 09:43:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Doma\Desktop\OTL.exe
[2013.11.12 09:42:00 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.11.12 09:26:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.11.12 07:26:06 | 001,470,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.11.12 07:26:06 | 000,631,276 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.11.12 07:26:06 | 000,616,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.11.12 07:26:06 | 000,121,930 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.11.12 07:26:06 | 000,106,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.11.12 06:49:42 | 000,015,344 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.11.12 06:49:42 | 000,015,344 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.11.12 06:40:22 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.11.12 06:40:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.11.12 06:39:56 | 3018,514,432 | -HS- | M] () -- C:\hiberfil.sys
[2013.11.11 14:36:34 | 005,041,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.11.11 14:36:12 | 396,362,211 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.11.11 11:56:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job
[2013.11.05 15:58:00 | 000,002,585 | ---- | M] () -- C:\Users\Public\Desktop\LibreOffice 4.1.lnk
[1 C:\Users\Doma\Documents\*.tmp files -> C:\Users\Doma\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.11.12 09:54:05 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.11.11 14:36:11 | 396,362,211 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.11.05 15:58:00 | 000,002,585 | ---- | C] () -- C:\Users\Public\Desktop\LibreOffice 4.1.lnk
[2013.10.25 17:25:12 | 000,584,584 | ---- | C] () -- C:\Windows\adb.exe
[2013.09.12 12:58:10 | 000,000,000 | ---- | C] () -- C:\Users\Doma\regbcm
[2013.07.24 12:33:38 | 000,001,072 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\.ptbt1
[2013.02.05 16:27:31 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\LangPlg.dll
[2013.02.05 16:27:31 | 000,051,576 | ---- | C] () -- C:\Windows\SysWow64\drvinstaller_IA64.exe
[2013.02.05 16:27:31 | 000,034,168 | ---- | C] () -- C:\Windows\SysWow64\drvinstaller_X86.exe
[2013.02.05 16:27:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\AwPluginVector.dll
[2013.02.05 16:27:31 | 000,027,512 | ---- | C] () -- C:\Windows\SysWow64\drvinstaller_X64.exe
[2013.02.05 16:27:30 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\KSDecode.dll
[2013.02.05 16:27:30 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\single.dll
[2013.02.05 16:27:30 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\sdata.dll
[2013.02.05 16:27:30 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\ImgDecode.dll
[2013.02.05 16:27:30 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\eFex.dll
[2013.02.05 16:27:30 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\Config.dll
[2013.02.05 16:27:30 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\roottools.dll
[2013.02.05 16:27:30 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\Phoenix_Fes.dll
[2013.02.05 16:27:30 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\idfactory.dll
[2013.02.05 16:27:30 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\encode.dll
[2013.02.05 16:27:30 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\crc32.dll
[2013.02.05 16:27:30 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\Phoenix_Elf.dll
[2013.02.05 16:27:30 | 000,004,096 | ---- | C] () -- C:\Windows\SysWow64\LiveSuit.dat
[2013.02.05 16:27:29 | 001,302,528 | ---- | C] () -- C:\Windows\SysWow64\LiveSuit.exe
[2013.02.05 16:27:29 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\ZipModule.dll
[2013.02.05 16:27:29 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\APipe.dll
[2013.02.05 16:27:29 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\ACmd.dll
[2013.01.23 06:12:06 | 000,009,584 | ---- | C] () -- C:\Windows\SysWow64\ractrlkeyhook.dll
[2012.11.25 20:54:01 | 000,001,480 | ---- | C] () -- C:\Users\Doma\AppData\Local\Adobe Uložit pro web 12.0 Prefs
[2012.11.12 19:27:51 | 000,002,298 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\ASSDraw3.cfg
[2012.11.02 23:46:12 | 000,000,214 | ---- | C] () -- C:\Users\Doma\AirControl_client_settings.properties
[2012.09.03 20:18:34 | 000,000,123 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\trueburner.ini
[2012.08.04 17:21:18 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\Amhooker.dll
[2012.07.25 11:00:18 | 001,129,312 | ---- | C] () -- C:\Windows\SysWow64\602convert.dll
[2012.07.04 06:34:16 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.07.04 06:34:16 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.04.18 18:39:10 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.02.28 21:22:48 | 000,000,600 | ---- | C] () -- C:\Users\Doma\AppData\Local\PUTTY.RND
[2011.12.06 08:49:44 | 000,004,992 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\mdbu.bin
[2011.11.04 19:23:27 | 000,000,132 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\Adobe Formát GIF CS5 – předvolby
[2011.10.16 13:00:31 | 000,060,198 | ---- | C] () -- C:\Users\Doma\AppData\Local\SRDownloader.err
[2011.10.16 10:04:55 | 000,001,192 | ---- | C] () -- C:\Users\Doma\AppData\Local\SRDownloader.nast
[2011.07.22 14:40:56 | 000,000,132 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
[2011.02.21 12:42:50 | 000,000,568 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\mainhst.zgh
[2011.01.19 17:47:30 | 000,099,384 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\inst.exe
[2011.01.19 17:47:30 | 000,007,859 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\pcouffin.cat
[2011.01.19 17:47:30 | 000,001,167 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\pcouffin.inf
[2011.01.19 17:47:05 | 000,001,057 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\vso_ts_preview.xml
[2010.11.28 11:39:13 | 000,069,632 | ---- | C] () -- C:\Users\Doma\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.24 13:43:32 | 000,000,600 | ---- | C] () -- C:\Users\Doma\AppData\Roaming\winscp.rnd
[2010.05.11 18:44:08 | 000,000,600 | ---- | C] () -- C:\Users\Doma\PUTTY.RND

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011.02.12 20:54:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.marble
[2013.11.11 14:47:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.minecraft
[2013.11.03 13:45:48 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.minecraft_old
[2012.01.23 22:22:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\3M
[2013.08.10 09:41:45 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\602Installer
[2013.08.10 09:35:10 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\602XML
[2013.11.09 10:32:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Aegisub
[2013.11.10 07:49:58 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\AIMP3
[2012.04.21 22:10:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\AnvSoft
[2011.04.14 08:36:46 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Artisteer
[2012.04.21 23:10:38 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Broad Intelligence
[2010.11.24 12:10:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Canon
[2010.12.01 13:36:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\CD-LabelPrint
[2012.04.08 17:29:32 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013.06.27 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DAEMON Tools Lite
[2012.04.02 13:55:51 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DeepBurner
[2012.02.21 23:36:07 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\doublecmd
[2012.04.21 22:10:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DVDVideoSoft
[2011.05.31 06:13:38 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ESET
[2012.05.29 16:49:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Feedreader
[2012.04.21 23:08:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Fraunhofer
[2011.04.18 21:06:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Garden Planner
[2010.12.07 10:02:43 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\GHISLER
[2013.11.11 14:40:10 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ICQ
[2010.11.24 13:44:01 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\InfraRecorder
[2013.06.27 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\inkscape
[2011.07.24 09:33:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\IrfanView
[2012.03.08 12:00:04 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\JLC's Software
[2013.11.04 21:15:05 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Juniper Networks
[2011.10.02 19:58:20 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\jvlt
[2011.04.16 20:23:34 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\KompoZer
[2011.04.13 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LangSoft
[2013.05.15 07:18:26 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LEVEL1
[2013.11.05 16:41:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LibreOffice
[2010.11.23 23:00:27 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Mikrotik
[2012.08.26 13:47:24 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\mkvtoolnix
[2013.11.10 19:50:25 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Mp3tag
[2013.08.30 15:02:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\PDF Architect
[2011.02.16 20:27:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\pdfMachine
[2011.05.15 18:14:53 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Publish Providers
[2012.11.08 08:35:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Samsung
[2011.05.03 08:32:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Serif
[2012.06.02 23:42:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Shark007
[2013.08.10 09:42:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Software602
[2011.05.15 18:14:51 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Sony
[2013.11.11 19:34:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\SPlayer
[2011.04.16 23:09:04 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012.05.04 14:21:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\TeamViewer
[2010.11.23 21:28:56 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\TrueCrypt
[2011.11.10 17:45:17 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Unity
[2013.10.28 10:30:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\uTorrent
[2012.12.07 18:27:53 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\VitySoft
[2013.11.04 21:13:52 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Vso
[2011.06.10 20:13:14 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Webian
[2012.06.02 23:41:09 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Win7codecs
[2010.11.24 14:18:34 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Windows Live Writer
[2011.06.26 12:12:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\xrecode2
[2010.11.25 08:30:08 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\YCanPDF
[2013.10.24 11:31:52 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\YouTube Downloader
[2011.02.21 12:50:26 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ZipGenius
[2013.05.23 15:45:24 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,032,624 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.11.23 19:14:06 | 000,000,906 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job
[2010.11.23 19:14:07 | 000,000,958 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job
[2010.12.07 20:21:44 | 000,000,944 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2010.12.07 20:21:45 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012.04.03 15:17:10 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.05.08 07:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 06:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 06:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013.09.07 03:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2012.08.22 19:06:13 | 001,901,936 | ---- | M] (Microsoft Corporation) MD5=7880A26B7D3B96FDA8EFD9F985036B1D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_117a13de9661c145\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013.05.08 07:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2013.07.06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2012.08.22 19:12:50 | 001,913,200 | ---- | M] (Microsoft Corporation) MD5=F782CAD3CEDBB3F9FFE3BF2775D92DDC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_113380f37d117668\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

< >

< %systemroot%*.* /U /s >
[7 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[15 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[11 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\*.tmp -> ]
[6 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.02.12 20:54:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.marble
[2013.11.11 14:47:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.minecraft
[2013.11.03 13:45:48 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\.minecraft_old
[2012.01.23 22:22:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\3M
[2013.08.10 09:41:45 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\602Installer
[2013.08.10 09:35:10 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\602XML
[2010.11.25 08:43:56 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ABBYY
[2011.04.16 23:11:59 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Adobe
[2011.04.16 23:09:04 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Adobe Mini Bridge CS5
[2013.11.09 10:32:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Aegisub
[2013.11.10 07:49:58 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\AIMP3
[2012.04.21 22:10:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\AnvSoft
[2012.06.04 21:57:13 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Apple Computer
[2011.04.14 08:36:46 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Artisteer
[2010.11.23 17:24:56 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ATI
[2012.04.21 23:10:38 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Broad Intelligence
[2010.11.24 12:10:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Canon
[2010.12.01 13:36:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\CD-LabelPrint
[2012.04.08 17:29:32 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013.06.27 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DAEMON Tools Lite
[2012.04.02 13:55:51 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DeepBurner
[2012.02.21 23:36:07 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\doublecmd
[2013.07.30 12:39:00 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Download Manager
[2012.04.21 22:10:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\DVDVideoSoft
[2011.05.31 06:13:38 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ESET
[2011.06.26 13:08:54 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\FastStone
[2012.05.29 16:49:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Feedreader
[2012.04.21 23:08:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Fraunhofer
[2011.04.18 21:06:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Garden Planner
[2010.12.07 10:02:43 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\GHISLER
[2012.07.01 10:17:05 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Google
[2013.11.11 14:40:10 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ICQ
[2010.11.23 17:12:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Identities
[2010.11.24 13:44:01 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\InfraRecorder
[2013.06.27 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\inkscape
[2012.06.05 17:34:23 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\InstallShield
[2011.07.24 09:33:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\IrfanView
[2012.03.08 12:00:04 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\JLC's Software
[2013.11.04 21:15:05 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Juniper Networks
[2011.10.02 19:58:20 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\jvlt
[2011.04.16 20:23:34 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\KompoZer
[2011.04.13 07:49:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LangSoft
[2013.05.15 07:18:26 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LEVEL1
[2013.11.05 16:41:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\LibreOffice
[2010.11.23 19:16:42 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Macromedia
[2012.08.06 12:50:58 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Malwarebytes
[2009.07.14 16:36:31 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Media Center Programs
[2013.07.29 09:57:15 | 000,000,000 | --SD | M] -- C:\Users\Doma\AppData\Roaming\Microsoft
[2010.11.23 23:00:27 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Mikrotik
[2012.08.26 13:47:24 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\mkvtoolnix
[2011.06.10 20:13:16 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Mozilla
[2013.11.10 19:50:25 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Mp3tag
[2013.08.30 15:02:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\PDF Architect
[2011.02.16 20:27:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\pdfMachine
[2011.05.15 18:14:53 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Publish Providers
[2012.11.08 08:35:49 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Samsung
[2011.05.03 08:32:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Serif
[2012.06.02 23:42:22 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Shark007
[2013.11.12 09:53:31 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Skype
[2011.07.02 12:39:39 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\skypePM
[2013.08.10 09:42:29 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Software602
[2011.05.15 18:14:51 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Sony
[2013.11.11 19:34:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\SPlayer
[2011.04.16 23:09:04 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012.05.04 14:21:19 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\TeamViewer
[2010.11.23 21:28:56 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\TrueCrypt
[2011.11.10 17:45:17 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Unity
[2013.10.28 10:30:55 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\uTorrent
[2012.12.07 18:27:53 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\VitySoft
[2012.10.28 10:47:50 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\vlc
[2013.11.04 21:13:52 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Vso
[2011.06.10 20:13:14 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Webian
[2012.06.02 23:41:09 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Win7codecs
[2010.11.24 14:18:34 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Windows Live Writer
[2011.09.06 11:05:16 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\WinRAR
[2011.06.26 12:12:28 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\xrecode2
[2010.11.25 08:30:08 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\YCanPDF
[2013.10.24 11:31:52 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\YouTube Downloader
[2011.02.21 12:50:26 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\ZipGenius
[2013.05.23 15:45:24 | 000,000,000 | ---D | M] -- C:\Users\Doma\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2013.11.04 21:13:50 | 000,099,384 | ---- | M] () -- C:\Users\Doma\AppData\Roaming\inst.exe
[2013.10.27 06:47:04 | 001,392,469 | ---- | M] (TeamExtreme) -- C:\Users\Doma\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe
[2013.10.30 13:53:48 | 000,069,250 | ---- | M] () -- C:\Users\Doma\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe
[2013.04.23 12:21:26 | 016,446,176 | ---- | M] () -- C:\Users\Doma\AppData\Roaming\3M\PDNotes\patch.exe
[2011.11.19 18:32:47 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Doma\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011.05.15 15:09:14 | 000,029,926 | R--- | M] () -- C:\Users\Doma\AppData\Roaming\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013.11.12 09:26:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.11.12 06:40:22 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.11.12 09:42:00 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.11.11 11:56:00 | 000,000,906 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job
[2013.11.12 09:56:00 | 000,000,958 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ICQ" = "C:\Program Files (x86)\ICQ7.6\ICQ.exe" silent loginmode=4 -- [2011.10.10 18:00:51 | 000,127,040 | ---- | M] (ICQ, LLC.)
"swg" = C:\Program Files (x86)\Google\GoogleToolbarNotifier\1.2.908.6962\GoogleToolbarNotifier.exe -- [2012.05.06 12:35:51 | 000,165,304 | ---- | M] (Google Inc.)
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.10.02 11:41:04 | 020,474,528 | R--- | M] (Skype Technologies S.A.)
"Google Update" = "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c -- [2010.11.23 19:14:04 | 000,136,176 | ---- | M] (Google Inc.)
"Zoner Photo Studio Autoupdate" = C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE -- [2013.06.07 15:51:02 | 000,774,680 | ---- | M] (ZONER software)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2013.09.23 00:54:30 | 000,770,648 | ---- | M] (Microsoft Corporation) MD5=D6B7DDB68436F13C3CAE2B92524F1FEC -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.11.12 09:54:05 | 000,000,512 | ---- | M] () MD5=BAB3A4D0C18DA6E3177E1A82EA785794 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2010.05.29 21:41:56 | 000,114,899 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\numpy\f2py\crackfortran.py
[2013.05.24 08:27:33 | 000,004,125 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\CrackedCom.class
[2012.12.07 18:28:06 | 000,005,369 | ---- | M] () -- \Users\Doma\AppData\Roaming\VitySoft\FRD\plugins\crackle.frp

< *keygen* /s >
[2013.11.04 21:50:14 | 000,005,296 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\baseROM\system\lib\libkeygen_jni.so

Pokračování OTL:

< *loader* /s >
[2008.08.28 18:34:20 | 004,965,736 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\Photodownloader.exe
[2008.08.28 15:42:12 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\de_de\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\en_us\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\es_es\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\it_it\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\no_no\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,308 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2008.08.28 15:42:16 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2010.03.09 04:28:40 | 005,297,608 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\Photodownloader.exe
[2010.03.09 01:38:58 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2010.03.09 01:38:58 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\de_de\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\en_us\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\es_es\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\it_it\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\no_no\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,308 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2010.03.09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2008.08.14 06:23:12 | 000,009,969 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\Startup Scripts CS4\Adobe Version Cue\VersionCueSDKLoader.jsx
[2012.11.23 13:20:00 | 000,343,040 | ---- | M] () -- \Program Files (x86)\Fotostar\Fotostar Offline client\CWImageLoader0.dll
[2013.02.09 02:39:28 | 000,000,934 | ---- | M] () -- \Program Files (x86)\Google\Picasa3\runtime\gpuploader_main.fen
[2010.05.09 19:14:22 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7.1\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2010.05.09 19:14:21 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.1\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2010.05.09 19:14:23 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7.1\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2010.05.09 19:14:21 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.1\imApp\theme\MUICoreLib\xtraLoader.swf
[2010.09.27 20:08:58 | 000,002,886 | ---- | M] () -- \Program Files (x86)\ICQ7.1\Xtraz\icq\content\babylon_feed\preloader01_b.swf
[2010.10.13 16:02:45 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.1\Xtraz\icq\content\icq_profile\preloader.html
[2010.11.03 12:09:56 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.1\Xtraz\icq\content\profile_forms\preloader.html
[2010.10.13 16:02:48 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.1\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.05.10 05:46:05 | 000,552,798 | ---- | M] () -- \Program Files (x86)\ICQ7.1\Xtraz\icq\theme\game_center\loaderBkg.png
[2011.10.05 20:14:25 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7.6\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.10.05 20:14:25 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7.6\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.10.05 20:14:24 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.6\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.10.05 20:06:17 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.6\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.03.06 09:24:56 | 000,003,614 | ---- | M] () -- \Program Files (x86)\Inkscape\etc\gtk-2.0\gdk-pixbuf.loaders
[2010.03.06 09:24:56 | 000,030,804 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2010.03.06 09:24:56 | 000,027,898 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2010.03.06 09:24:56 | 000,042,058 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2010.03.06 09:24:56 | 000,023,145 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2010.03.06 09:24:56 | 000,028,692 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2010.03.06 09:24:56 | 000,034,496 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2010.03.06 09:24:56 | 000,022,435 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2010.03.06 09:24:56 | 000,036,528 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2010.03.06 09:24:56 | 000,026,252 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2010.03.06 09:24:56 | 000,020,063 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2010.03.06 09:24:56 | 000,024,412 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2010.03.06 09:24:56 | 000,029,401 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2010.03.06 09:24:56 | 000,019,399 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2010.03.06 09:24:56 | 000,025,270 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2010.03.06 09:24:56 | 000,042,114 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2010.03.06 09:24:56 | 000,018,909 | ---- | M] () -- \Program Files (x86)\Inkscape\lib\gtk-2.0\2.10.0\loaders\svg_loader.dll
[2010.08.16 10:41:40 | 000,032,958 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\ailoader.py
[2010.08.16 10:41:40 | 000,001,847 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\bziploader.py
[2010.08.16 10:41:40 | 000,057,685 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\ccxloader.py
[2010.08.16 10:41:40 | 000,029,336 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cdrloader.py
[2010.08.16 10:41:40 | 000,001,341 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cdrziploader.py
[2010.08.16 10:41:40 | 000,028,643 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cgmloader.py
[2010.08.16 10:41:40 | 000,055,918 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\cmxloader.py
[2010.08.16 10:41:40 | 000,038,308 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\dxfloader.py
[2010.08.16 10:41:40 | 000,001,949 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\gziploader.py
[2010.08.16 10:41:40 | 000,007,779 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\pltloader.py
[2010.08.16 10:41:40 | 000,017,301 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\sk1loader.py
[2010.08.16 10:41:40 | 000,015,416 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\skloader.py
[2010.08.16 10:41:40 | 000,015,832 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\stitchloader.py
[2010.08.16 10:41:40 | 000,038,937 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\svgloader.py
[2010.08.16 10:41:40 | 000,014,300 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\wmfloader.py
[2010.08.16 10:41:40 | 000,017,550 | ---- | M] () -- \Program Files (x86)\Inkscape\python\Lib\site-packages\sk1libs\filters\import\xfigloader.py
[2010.07.14 08:28:02 | 000,214,528 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.exe
[2011.01.23 22:40:04 | 000,593,293 | ---- | M] () -- \Program Files (x86)\JDownloader\JDownloader.jar
[2013.11.04 18:58:34 | 000,000,101 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\exclusiveloader.com.png
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\IPAUploaderCom.class
[2012.10.24 09:51:10 | 000,011,071 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\MyDownloaderNet.class
[2013.05.24 08:26:19 | 000,004,584 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\OmpLoaderOrg.class
[2013.08.23 10:29:23 | 000,003,880 | ---- | M] () -- \Program Files (x86)\JDownloader\jd\plugins\hoster\UploaderJp.class
[2010.07.14 08:29:38 | 000,032,222 | ---- | M] () -- \Program Files (x86)\JDownloader\licenses\jdownloader.license
[2013.10.21 17:10:22 | 000,006,852 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\pythonloader.py
[2013.10.24 16:47:16 | 000,000,171 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\pythonloader.uno.ini
[2013.10.24 16:43:20 | 000,034,320 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\pythonloaderlo.dll
[2013.11.05 16:41:25 | 000,007,243 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\__pycache__\pythonloader.cpython-33.pyc
[2013.10.22 23:41:04 | 000,124,248 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\classes\libloader-1.1.6.jar
[2013.10.24 03:47:50 | 000,013,850 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\unittest\loader.py
[2013.10.24 03:47:52 | 000,049,593 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\unittest\test\test_loader.py
[2013.10.24 16:41:56 | 000,063,504 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\URE\bin\javaloaderlo.dll
[2013.10.22 23:33:52 | 000,004,759 | ---- | M] () -- \Program Files (x86)\LibreOffice 4\URE\java\unoloader.jar
[2013.08.06 20:29:50 | 000,061,528 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2013.03.05 10:11:10 | 000,432,128 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSPluginLoader.exe
[2013.02.06 16:42:00 | 000,323,584 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\en\ZPSFacebookUploader.resources.dll
[2013.03.05 13:03:44 | 000,443,904 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSPluginLoader.exe
[2011.12.06 13:06:40 | 000,323,584 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\en\ZPSFlickrUploader.resources.dll
[2013.03.05 12:34:20 | 000,192,512 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPluginLoader.exe
[2013.02.06 16:20:12 | 000,323,584 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\en\ZPSPicasaUploader.resources.dll
[2013.06.07 15:50:44 | 000,103,960 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\8bfLoader.exe
[2013.06.07 15:50:52 | 000,017,944 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\WICLoader.exe
[2013.06.07 15:51:18 | 000,020,504 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program64\WICLoader.exe
[2010.11.23 19:27:46 | 000,000,362 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader Support.lnk
[2010.11.23 19:27:46 | 000,001,125 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader.lnk
[2010.11.23 19:27:48 | 000,001,115 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader\Uninstall JDownloader.lnk
[2012.12.04 17:00:50 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2012.12.04 17:00:50 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2012.12.04 17:00:50 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2010.11.23 19:27:46 | 000,000,362 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader Support.lnk
[2010.11.23 19:27:46 | 000,001,125 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader.lnk
[2010.11.23 19:27:48 | 000,001,115 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\JDownloader\Uninstall JDownloader.lnk
[2012.12.04 17:00:50 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2012.12.04 17:00:50 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2012.12.04 17:00:50 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.08.31 22:18:54 | 000,060,198 | ---- | M] () -- \Users\Doma\AppData\Local\SRDownloader.err
[2011.10.30 17:18:59 | 000,000,040 | ---- | M] () -- \Users\Doma\AppData\Local\SRDownloader.log
[2013.08.31 22:19:05 | 000,001,192 | ---- | M] () -- \Users\Doma\AppData\Local\SRDownloader.nast
[2009.07.17 12:39:42 | 000,189,696 | ---- | M] () -- \Users\Doma\AppData\Local\Temp\prLoader.dll
[1069 \Users\Doma\AppData\Local\Temp\*.tmp files -> \Users\Doma\AppData\Local\Temp\*.tmp -> ]
[2009.07.17 12:39:42 | 000,189,696 | ---- | M] () -- \Users\Doma\AppData\Local\Temp\AVCBack\prLoader.dll
[2011.07.16 05:53:42 | 000,005,154 | ---- | M] () -- \Users\Doma\AppData\Local\Temp\par-Doma\cache-exiftool-8.61\inc\lib\AutoLoader.pm
[2011.07.16 05:53:42 | 000,014,685 | ---- | M] () -- \Users\Doma\AppData\Local\Temp\par-Doma\cache-exiftool-8.61\inc\lib\DynaLoader.pm
[2011.07.16 05:53:44 | 000,002,997 | ---- | M] () -- \Users\Doma\AppData\Local\Temp\par-Doma\cache-exiftool-8.61\inc\lib\XSLoader.pm
[2013.11.11 14:47:50 | 000,282,542 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log
[2013.11.11 14:41:39 | 000,000,000 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log.lck
[2013.11.09 21:12:53 | 004,821,989 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft\ForgeModLoader-client-1.log
[2013.11.09 15:30:18 | 000,264,934 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft\ForgeModLoader-client-2.log
[2013.11.03 13:45:48 | 000,129,584 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-0.log
[2013.09.22 11:51:36 | 000,129,675 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-0.log.1
[2013.09.22 11:48:15 | 000,000,000 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-0.log.1.lck
[2013.11.03 13:45:26 | 000,000,000 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-0.log.lck
[2013.11.03 10:22:31 | 000,155,296 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-1.log
[2013.09.21 13:56:45 | 000,191,222 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-1.log.1
[2013.11.03 09:05:46 | 000,177,509 | ---- | M] () -- \Users\Doma\AppData\Roaming\.minecraft_old\ForgeModLoader-client-2.log
[2010.11.23 19:27:46 | 000,001,125 | ---- | M] () -- \Users\Doma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\JDownloader.lnk
[2013.11.04 21:57:05 | 000,000,320 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Contacts.apk\build\apk\res\layout\contact_detail_loader_fragment.xml
[2013.11.04 21:52:53 | 000,000,171 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Contacts.apk\res\layout\contact_detail_loader_fragment.xml
[2013.11.04 21:53:32 | 000,025,932 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\LBESEC_MIUI.apk\assets\libfwloader.so
[2013.11.04 21:53:32 | 000,062,848 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\LBESEC_MIUI.apk\assets\libloader.so
[2013.11.04 21:53:51 | 000,013,509 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\MiuiSystemUI.apk\smali\com\android\systemui\recent\RecentTasksLoader$1.smali
[2013.11.04 21:53:51 | 000,006,168 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\MiuiSystemUI.apk\smali\com\android\systemui\recent\RecentTasksLoader$2.smali
[2013.11.04 21:53:51 | 000,025,041 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\MiuiSystemUI.apk\smali\com\android\systemui\recent\RecentTasksLoader.smali
[2013.11.04 21:54:07 | 000,000,383 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\data\ContactPhotoLoader$1.smali
[2013.11.04 21:54:07 | 000,001,190 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\data\ContactPhotoLoader$BitmapHolder.smali
[2013.11.04 21:54:07 | 000,012,514 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\data\ContactPhotoLoader$LoaderThread.smali
[2013.11.04 21:54:07 | 000,030,768 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\data\ContactPhotoLoader.smali
[2013.11.04 21:54:10 | 000,000,379 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\ui\PreviewImageLoader$1.smali
[2013.11.04 21:54:10 | 000,001,313 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\ui\PreviewImageLoader$CacheNode.smali
[2013.11.04 21:54:10 | 000,007,128 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\ui\PreviewImageLoader$LoaderThread$1.smali
[2013.11.04 21:54:10 | 000,017,849 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\ui\PreviewImageLoader$LoaderThread.smali
[2013.11.04 21:54:10 | 000,013,325 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\Mms.apk\smali\com\android\mms\ui\PreviewImageLoader.smali
[2013.11.04 21:54:54 | 000,002,496 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\CachingIconLoader$1.smali
[2013.11.04 21:54:54 | 000,005,995 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\CachingIconLoader$Entry.smali
[2013.11.04 21:54:54 | 000,009,419 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\CachingIconLoader.smali
[2013.11.04 21:54:54 | 000,000,674 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\IconLoader.smali
[2013.11.04 21:54:54 | 000,000,392 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\PackageIconLoader$1.smali
[2013.11.04 21:54:54 | 000,001,953 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\PackageIconLoader$IconLaterTask$1.smali
[2013.11.04 21:54:54 | 000,006,265 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\PackageIconLoader$IconLaterTask.smali
[2013.11.04 21:54:54 | 000,001,393 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\PackageIconLoader$OpenResourceIdResult.smali
[2013.11.04 21:54:54 | 000,030,932 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\android\quicksearchbox\PackageIconLoader.smali
[2013.11.04 21:54:55 | 000,006,772 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\base\FinalizableReferenceQueue$DecoupledLoader.smali
[2013.11.04 21:54:55 | 000,001,613 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\base\FinalizableReferenceQueue$DirectLoader.smali
[2013.11.04 21:54:55 | 000,000,714 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\base\FinalizableReferenceQueue$FinalizerLoader.smali
[2013.11.04 21:54:55 | 000,002,537 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\base\FinalizableReferenceQueue$SystemLoader.smali
[2013.11.04 21:54:56 | 000,002,984 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\cache\CacheLoader$FunctionToCacheLoader.smali
[2013.11.04 21:54:56 | 000,000,711 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\cache\CacheLoader$InvalidCacheLoadException.smali
[2013.11.04 21:54:56 | 000,002,966 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\cache\CacheLoader$SupplierToCacheLoader.smali
[2013.11.04 21:54:56 | 000,000,664 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\cache\CacheLoader$UnsupportedLoadingOperationException.smali
[2013.11.04 21:54:56 | 000,005,500 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\apkDecompiled\QuickSearchBox.apk\smali\com\google\common\cache\CacheLoader.smali
[2013.11.04 21:51:55 | 000,006,888 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\baseROM\system\media\theme\miui_mod_icons\com.tencent.android.qqdownloader.png
[2013.11.04 22:00:26 | 000,000,679 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\build\apk\res\raw\loaderror.html
[2013.11.04 22:00:29 | 000,002,521 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\build\apk\res\raw-cs\loaderror.html
[2013.11.04 22:00:29 | 000,000,654 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\build\apk\res\raw-zh-CN\loaderror.html
[2013.11.04 21:56:20 | 000,000,679 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\res\raw\loaderror.html
[2013.11.04 21:50:52 | 000,002,521 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\res\raw-cs\loaderror.html
[2013.11.04 21:56:10 | 000,000,654 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\frmDecompiled\framework-res.apk\res\raw-zh-rCN\loaderror.html
[2013.11.04 21:51:55 | 000,006,888 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\replace_git\miui_v4\main\system\media\theme\miui_mod_icons\com.tencent.android.qqdownloader.png
[2013.11.04 21:50:49 | 000,000,682 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\translation\device\crespo\framework-res.apk\raw-cs\loaderror.html
[2013.11.04 21:50:52 | 000,002,521 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\translation\main\framework-res.apk\res\raw-cs\loaderror.html
[2013.11.04 21:50:49 | 000,000,682 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\translation_git\Czech\device\crespo\framework-res.apk\raw-cs\loaderror.html
[2013.11.04 21:50:52 | 000,002,521 | ---- | M] () -- \Users\Doma\Downloads\jBART-master\miuiandroid_a820_3.10.25_jb-4.2.zip.bzproject\translation_git\Czech\main\framework-res.apk\res\raw-cs\loaderror.html
[2010.12.04 10:28:07 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2011.11.22 14:12:58 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2011.02.02 14:35:38 | 000,009,622 | ---- | M] () -- \Windows\System32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2011.11.22 14:12:58 | 000,012,532 | ---- | M] () -- \Windows\SysWOW64\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2011.02.02 14:35:38 | 000,009,622 | ---- | M] () -- \Windows\SysWOW64\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:41:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2011.04.13 07:04:32 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.04.13 07:04:32 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011.04.13 07:04:32 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011.04.13 07:04:32 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011.04.13 07:04:32 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 06:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 02:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 660 bytes -> C:\Users\Doma\Documents\Upomínka plateb.eml:OECustomProperty
@Alternate Data Stream - 6104 bytes -> C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:C8B8CEBD

< End of report >

A Extra:
OTL Extras logfile created on: 12.11.2013 9:45:17 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Doma\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,75 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 47,23% Memory free
7,49 Gb Paging File | 4,85 Gb Available in Paging File | 64,75% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 488,18 Gb Total Space | 198,35 Gb Free Space | 40,63% Space Free | Partition Type: NTFS
Drive D: | 443,23 Gb Total Space | 49,80 Gb Free Space | 11,24% Space Free | Partition Type: NTFS
Drive H: | 292,97 Gb Total Space | 30,23 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive V: | 303,20 Gb Total Space | 38,38 Gb Free Space | 12,66% Space Free | Partition Type: NTFS

Computer Name: DOMA-PC | User Name: Doma | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [CEWE prezentace fotografií] -- "C:\Program Files (x86)\Fotostar\Fotostar Offline client\CEWE prezentace fotografií.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotostar Offline client] -- "C:\Program Files (x86)\Fotostar\Fotostar Offline client\Fotostar Offline client.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [CEWE prezentace fotografií] -- "C:\Program Files (x86)\Fotostar\Fotostar Offline client\CEWE prezentace fotografií.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotostar Offline client] -- "C:\Program Files (x86)\Fotostar\Fotostar Offline client\Fotostar Offline client.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05919113-EA50-40D2-8003-D4746AD71137}" = rport=10243 | protocol=6 | dir=out | app=system |
"{0E520AC3-1EC0-441B-816B-5CCA91CE4E79}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{12A70257-DE80-4E81-8A5A-4E654555678E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{226A06FF-A273-4993-A72F-CA482A7D97F7}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{231E0814-CDBB-4E19-BAD8-204B9B102B0A}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{2AD371D3-AAC9-4108-8FFD-B4BC870A7DF2}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2D41EC62-8EBC-42C8-AD46-F019341AB1E9}" = lport=2799 | protocol=6 | dir=in | name=altova license metering port (tcp) |
"{36A7E5DC-5B2E-4573-B523-7A396F04D7C8}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3A80F50B-16C5-4410-9BA3-60F791843FAF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{5395CD7A-3D05-44FE-9D28-2DA736599BE5}" = lport=9081 | protocol=6 | dir=in | name=ac2_9081in |
"{5C1A7888-9D16-4EFD-8382-212A7FC25596}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{6587992B-12F8-499E-BDA8-227FA3C975AB}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{68324FCD-FA22-44D6-96D6-A82B9204FC21}" = lport=137 | protocol=17 | dir=in | app=system |
"{73C1F8F6-91E7-47CC-85BE-51B2F8861948}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{75A49E65-2AE7-416A-B715-AEEB53805ED1}" = lport=139 | protocol=6 | dir=in | app=system |
"{770AE9D5-01AE-4ED5-8371-CEFA49C59094}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7B44F75F-8B69-408D-B18D-4291D6A9AB37}" = rport=139 | protocol=6 | dir=out | app=system |
"{822D0478-310E-487C-87E9-667D650593DA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{86B03A1D-445E-42DF-BDB6-E000E5410396}" = rport=138 | protocol=17 | dir=out | app=system |
"{90056651-3E67-4A81-BD9B-D74F065BC81D}" = rport=9081 | protocol=6 | dir=out | name=ac2_9081 |
"{92C939A8-C9BD-4BF4-BDD5-EDBC8DB8D866}" = lport=2869 | protocol=6 | dir=in | app=system |
"{94144BF2-3B94-49F0-A6A7-23567A17AD25}" = lport=445 | protocol=6 | dir=in | app=system |
"{982773B3-00A8-428E-B720-D609C2546022}" = rport=445 | protocol=6 | dir=out | app=system |
"{9A3002C9-62B5-4811-BFC6-BE2BD8BEE168}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A62C5AE4-4486-449B-AD3D-206895F8FEE2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{ACA66EA6-46EF-4A2E-A05A-A8EB72348146}" = lport=2799 | protocol=17 | dir=in | name=altova license metering port (udp) |
"{B3367361-C856-4308-9D88-D6CCB97754EC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C05BF1A1-2C6A-469D-AF68-87DED2C83DE8}" = rport=137 | protocol=17 | dir=out | app=system |
"{CE6A449B-1158-4C97-BEED-F64C98CCFA9B}" = lport=1038 | protocol=6 | dir=in | name=akamai netsession interface |
"{D2D15A0D-6F88-4055-A55A-CB3156BC5FF0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ECD01C1B-B6DC-4723-B8E3-EAF3430EC150}" = lport=138 | protocol=17 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1A03E3AE-E7A0-4D53-A2A1-D9BE32FFB543}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{21C003DE-9693-41E6-8D53-4436077D8F6C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{267687D8-EA6B-48F2-8DB4-DA662DEC9145}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{30C7F762-271D-45FA-8ECA-81F382F7DF1E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3AE3E8D4-0479-4C65-B186-FC87D3E631DD}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\rm.exe |
"{46AA34BB-5797-411C-831A-0C2F50D457F4}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\umi.exe |
"{47B1187A-C650-4D7A-A2A9-45F1EE5FD6D9}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{4DE3076E-A297-486D-BD17-12815171BA97}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\studio.exe |
"{55511B6C-ABCC-43FE-AE96-EFBE4F708990}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{56FD43C0-E781-42C8-8CE7-6238C0A858AD}" = dir=in | app=c:\program files (x86)\samsung\allshare\allshare.exe |
"{5A47AEE0-F7F1-4D5E-8E6B-9B378647C85F}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\studio.exe |
"{5E68C91C-2584-46D3-B1FF-E5A0DBFA2B17}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5F1CA49A-4416-4710-BBD3-7A849AE8014B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{60454AE9-5BC4-4F51-A6C4-A56AD1F47EAE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{61B5737D-AC6D-406C-9FF9-92223DEE629E}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{62623792-5626-49F1-8F73-7E3B433EAE5C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{65309607-5919-44B3-BFE0-BF9382AC1198}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\soft602\langserv.exe |
"{71888072-A1C8-4ED5-955D-D1AE6F3F4334}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\rm.exe |
"{83B744CE-99BA-40B2-BFF2-C3A69757D294}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{91A4D4CA-5E51-4A12-B2C9-AAC1FC6EEE75}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{9C9579B1-2258-403D-A002-0234A1B648DC}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\umi.exe |
"{9D4D47E8-FA5E-47CD-9CC0-8185D38DC153}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{A3BF054F-29B1-4AA1-AB3E-840EC8B32EEC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A47A7AC8-FC71-4E54-9F9C-E2705FB6FA14}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A8FFB05F-362E-42BB-AD7B-7ECC4C3EBAC1}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{ABD12E2C-DE34-40FD-9286-A82F0E540ACA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AC4269FE-BBD0-4FCF-8E24-1945B5353EAB}" = dir=in | app=c:\program files (x86)\samsung\allshare\allsharedms\allsharedms.exe |
"{AECC1124-E987-4C37-ABB1-EF44634F5CD3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B0361E94-487B-41ED-B595-702149211673}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B61DB04A-A11B-422E-BA49-5A4EE7D9B46A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C190778A-EAF1-465B-8858-21C559AD4471}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{C2018468-C56A-4AEB-9AEC-036326CE5882}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\soft602\langserv.exe |
"{C87B875C-DC41-4D5C-8D46-BD3FBAD43CB1}" = protocol=6 | dir=out | app=system |
"{CA8B8733-3F10-42F6-A92F-D3334FC7C015}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CAEAB55C-BEAD-41CC-B288-C00773729A0C}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{CFF1A554-A920-4F50-BA6A-34897AC0E663}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{D4B5824C-F6F2-4861-8E14-E04633BA5C36}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{DAF1816E-1EC8-4C86-8C86-962C9853F100}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F72F4A77-BB4B-4955-8B6C-FFFEF1463E17}" = dir=in | app=c:\program files (x86)\samsung\allshare\allshareagent.exe |
"{FD5221EF-56A4-4A33-B0A3-B36C30CBB9BE}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"TCP Query User{0531F59A-1301-45AE-845B-755D92510936}C:\program files (x86)\3m\pdnotes\pdnotes.exe" = protocol=6 | dir=in | app=c:\program files (x86)\3m\pdnotes\pdnotes.exe |
"TCP Query User{1A14B04D-DCA1-41CE-A2ED-577404D615B2}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"TCP Query User{34073268-ED11-4C50-86FA-004414DF2A8A}C:\program files (x86)\icq7.6\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"TCP Query User{3FDC0518-1088-48B8-972F-87AA01F6644F}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{93B79C1A-E1D5-42B6-8860-8B83BCDB8A14}C:\program files\realvnc\vnc viewer\vncviewer.exe" = protocol=6 | dir=in | app=c:\program files\realvnc\vnc viewer\vncviewer.exe |
"TCP Query User{9EE92514-03E0-4A72-B0A7-03EB1CF87FBE}C:\program files (x86)\splayer\splayer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\splayer\splayer.exe |
"TCP Query User{AA4E0914-9B45-4DD5-B4FE-5FBAE716712E}C:\program files (x86)\pinnacle\studio 15\programs\studio.exe" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\studio.exe |
"TCP Query User{ADABBE07-3443-4381-BC25-0A7A66A5B33E}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{AEF9ECBA-6588-458D-8861-82FC8905E28F}C:\program files (x86)\3m\pdnotes\pdnotes.exe" = protocol=6 | dir=in | app=c:\program files (x86)\3m\pdnotes\pdnotes.exe |
"TCP Query User{BA85B2D7-5871-4718-B5B7-80BAA3EB5FE7}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{C2C805B7-E8E1-4148-A325-625AD24CFFEA}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe |
"TCP Query User{D4D50F00-990B-4C4A-8441-9BFD3C7F9689}C:\users\doma\appdata\local\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\users\doma\appdata\local\google\chrome\application\chrome.exe |
"TCP Query User{F24E387C-46AB-46C7-9D0C-624E27782490}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"TCP Query User{FF97FA02-E108-4FA9-A4D7-E1EF2546E13C}C:\users\doma\downloads\winbox.exe" = protocol=6 | dir=in | app=c:\users\doma\downloads\winbox.exe |
"UDP Query User{058874D5-0C17-463C-B2AF-A0F7A78865FA}C:\program files (x86)\3m\pdnotes\pdnotes.exe" = protocol=17 | dir=in | app=c:\program files (x86)\3m\pdnotes\pdnotes.exe |
"UDP Query User{17385F6B-CFF5-46D6-9216-A857895423AD}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{30C78E81-7DDD-40B8-BB71-30F21ECD08EF}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{34D5CBC8-5DE6-413D-80E3-29FC94FAE5C5}C:\program files (x86)\3m\pdnotes\pdnotes.exe" = protocol=17 | dir=in | app=c:\program files (x86)\3m\pdnotes\pdnotes.exe |
"UDP Query User{35603D9F-C212-4D2A-B9B6-1DC3EDAB847A}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{4876DAEA-EDC1-488F-B392-A20217A1D14A}C:\program files (x86)\pinnacle\studio 15\programs\studio.exe" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 15\programs\studio.exe |
"UDP Query User{4F5A119D-5D0B-4B51-9B89-46F032B594DE}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{596BCF39-A8DD-4AB5-B92E-C12F16B2E25C}C:\program files (x86)\icq7.6\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"UDP Query User{6EDC4FEE-7F11-4705-B254-81972497F626}C:\users\doma\downloads\winbox.exe" = protocol=17 | dir=in | app=c:\users\doma\downloads\winbox.exe |
"UDP Query User{8121D764-6922-4ED3-B59F-B28048130EA3}C:\users\doma\appdata\local\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\users\doma\appdata\local\google\chrome\application\chrome.exe |
"UDP Query User{8453BDE3-EAD5-4E9F-90CA-6B2FA82300F9}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"UDP Query User{86846C77-1735-4CAA-AEE0-AD67F13C5D91}C:\program files (x86)\splayer\splayer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\splayer\splayer.exe |
"UDP Query User{A9900F9D-35D6-4EEB-B641-748A876F244E}C:\program files\realvnc\vnc viewer\vncviewer.exe" = protocol=17 | dir=in | app=c:\program files\realvnc\vnc viewer\vncviewer.exe |
"UDP Query User{EE097590-F5BA-4335-BCB4-B45411C0F7F4}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01D42BF0-ED08-463f-8A28-99EB6FEE962B}" = ZTE Handset USB Driver
"{0CB2E2BC-A312-5821-C5C7-A295A1BEFD08}" = AMD Catalyst Install Manager
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4700_series" = Canon iP4700 series Printer Driver
"{17CA32D1-73BD-4990-B8F6-369D8D34B05D}" = Microsoft Antimalware Service CS-CZ Language Pack
"{1B7C624C-4EEE-4A1A-7CE9-CBE76DD23FF2}" = AMD Accelerated Video Transcoding
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{2C22EA92-CB30-4932-0053-000001000000}" = InfraRecorder 0.53 (x64 edition)
"{2D445001-F852-CFF5-8056-F629A0AA2C55}" = AMD Drag and Drop Transcoding
"{2E22DBC9-030D-87B3-5E9C-51792D09A3BE}" = AMD Fuel
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5EEC477F-8E9B-4420-8829-16E7426227DB}" = Windows Live MIME IFilter
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6A1D3B4D-A746-26DD-DB3C-FA9B6CED6FDB}" = AMD Media Foundation Decoders
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D26D58C-3464-4C03-BB61-5695F984EFEF}" = Microsoft Security Client
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{A89B52D3-DA3F-1CA3-BD33-D53871D60081}" = ccc-utility64
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D2D77DC2-8299-11D1-8949-444553540000}_is1" = ZTE Handset USB Driver
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client CS-CZ Language Pack
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"FinePrint" = FinePrint
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"WinRAR archiver" = WinRAR 5.00 beta 8 (64-bit)
"x64 Components_is1" = x64 Components v3.6.4
"ZonerPhotoStudio15_CZ_is1" = Zoner Photo Studio 15
"ZonerPhotoStudio15_EN_is1" = Zoner Photo Studio 15

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{054C5EBD-1803-9B06-A201-63A1A8A5C365}" = CCC Help Danish
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0FB8CBBF-CFBA-B7C5-6433-4F5132783C31}" = CCC Help Portuguese
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{1362E602-9625-42D3-B57F-CDA9D26F9DA8}" = Pinnacle Studio 15
"{143412FA-840C-6158-599F-2B32D0861F80}" = Catalyst Control Center Graphics Previews Common
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20EA5B84-7055-65D9-7378-59750A15C6B5}" = CCC Help Russian
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23AAEBF8-12B1-43EA-B75D-CDC613CA6CB4}" = Photo Common
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 3.0.2
"{2680C5AE-EDC8-7A73-3D41-FCE9A2F22390}" = CCC Help German
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 45
"{26E20136-E332-4BC6-903F-ADDCAEE53263}" = ArCon 9 Profesionál
"{3162F9FB-9689-4B8E-B927-CE7F5840E8F6}" = 602PdfDriver
"{32E879B3-F89C-5385-78C8-4DE7730C5FA0}" = AMD VISION Engine Control Center
"{33D64034-5BC0-FF4F-6176-62ED61555CA8}" = CCC Help Thai
"{3CFAAB58-35C8-84C9-1391-8D4373714AFE}" = CCC Help Spanish
"{453FDDF1-BA65-8D13-2E6F-1740190BB5C4}" = CCC Help Greek
"{4728A95D-FD9B-CEE9-9609-BB01B5F82A0B}" = CCC Help Turkish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AFC194C-FEAD-B844-92C2-D0273872ECCF}" = CCC Help Dutch
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.9
"{4F3722AD-197D-4DBB-BDFB-D2F0D6776354}" = LibreOffice 4.1.3.2
"{5308F6BF-4660-926A-B611-0CBB32F44DD0}" = CCC Help Swedish
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5D58EACA-0317-4CFF-9E13-53CCD525DE32}" = Catalyst Control Center InstallProxy
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{69425AB7-75BF-25FC-EB4F-D2EAE9D82AA5}" = CCC Help Hungarian
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{7032B400-11EC-11E0-A9BF-0013D3D69929}" = MSVCRT Redists
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{79361740-EAE3-11E2-9911-B8AC6F98CCE3}" = Google Earth Plug-in
"{79839E2D-82B1-6DF1-97A6-6737E4404407}" = CCC Help Japanese
"{7C2D9B2C-D78C-EC0A-2337-612FD4799750}" = CCC Help Czech
"{7D9C2CBE-5941-0250-2922-804D0A506ED0}" = CCC Help Polish
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{892994D3-5963-4877-A8DB-629607E8E928}" = Software602 Form Filler
"{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9057D097-0563-6FFB-CDC6-DB2B2C5D1014}" = CCC Help Italian
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{97B999ED-37CE-433C-8495-530EB679E35D}" = Post-it® Digital Notes
"{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
"{9976E0BD-56A6-4A32-8597-B80FCE62063A}" = Windows Live Essentials
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DCC4C41-BB9C-E2FB-9B18-14DF222902EB}_is1" = minecraft-1.6.2 version for Windows
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A89131FD-3D18-4DA8-84C8-622423011B51}_is1" = ALNO AG Kitchen Planner
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA387C7F-7413-9C5A-DB71-70E406A8A92E}" = CCC Help French
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.8) - Czech
"{B00F5097-1F34-D3EA-4FB9-8DD2FAFF66F4}" = CCC Help Finnish
"{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
"{B42129AB-E528-9CB4-7C8B-3BFE648F5CD8}" = CCC Help Norwegian
"{B6FF40EA-AEF2-46FF-9516-9A6512901B97}" = Windows Live Mail
"{BADEEBDE-ABAF-4650-9149-51614651A1A0}" = Windows Live Writer Resources
"{BC7BED89-618B-4E89-8ADF-75D47F276223}" = Pinnacle Studio 15 Ultimate Collection Plugins
"{C1A27149-1897-8509-CBFC-2C96866C8AD6}" = CCC Help Korean
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D310DD60-9EF2-4C9C-AD66-A58185A1C7CB}" = Windows Live UX Platform Language Pack
"{D604900F-A275-416C-AF9D-CDEDF58B72DB}" = Windows Live Mail
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE54DD68-6E24-9B72-467A-DFEE00E6E9A8}" = CCC Help Chinese Traditional
"{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{E9FDD18A-206A-9A43-AAE3-AB72EFFCD333}" = CCC Help Chinese Standard
"{ED524538-828E-1AD8-D0E1-E2E72C926EE0}" = CCC Help English
"{EFBCA571-617D-484A-9ECA-E301BB6D0750}" = Windows Live Writer
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}" = Junk Mail filter update
"{FCFE800F-8F42-1AC9-895C-10389CB90D86}" = Catalyst Control Center Localization All
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AIMP3" = AIMP3
"AXIS Media Control Embedded" = AXIS Media Control Embedded
"CSMFYUV" = CSMX AVI lossless video codec (Remove Only)
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVD Shrink_is1" = DVD Shrink 3.2
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"FeedReader_is1" = FeedReader
"Fotostar Offline client" = Fotostar Offline client
"FUDVROCX_is1" = FUDVROCX V1.0.3.31
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Hugin" = Hugin 2011.4.0
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Inkscape" = Inkscape 0.48.0
"InstallShield_{26E20136-E332-4BC6-903F-ADDCAEE53263}" = ArCon 9 Profesionál
"InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"IrfanView" = IrfanView (remove only)
"JDownloader" = JDownloader
"MediaNavigation.CDLabelPrint" = CD-LabelPrint
"Money S3" = Ekonomický systém Money S3
"Mp3tag" = Mp3tag v2.54
"Noty 2013 - Music Notes Training" = Noty 2013 - Music Notes Training
"Picasa 3" = Picasa 3
"Rossmann FOTOSHOP" = Rossmann FOTOSHOP
"SPlayer" = SPlayer
"Syncrosoft's License Control" = Syncrosoft's License Control
"TeamViewer 8" = TeamViewer 8
"Theophilos_is1" = Theophilos 3
"TrueCrypt" = TrueCrypt
"uTorrent" = µTorrent
"VirtualCloneDrive" = VirtualCloneDrive
"WinLiveSuite" = Windows Live Essentials
"winscp3_is1" = WinSCP 4.2.9
"XFast USB" = XFast USB

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-4159004246-1342669911-4115328569-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 12.11.2013 1:53:00 | Computer Name = Doma-PC | Source = System Restore | ID = 8193
Description =

Error - 12.11.2013 4:54:01 | Computer Name = Doma-PC | Source = VSS | ID = 11
Description =

Error - 12.11.2013 4:54:01 | Computer Name = Doma-PC | Source = VSS | ID = 8193
Description =

Error - 12.11.2013 4:54:01 | Computer Name = Doma-PC | Source = System Restore | ID = 8193
Description =

[ OSession Events ]
Error - 19.2.2011 16:11:59 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 70
seconds with 60 seconds of active time. This session ended with a crash.

Error - 13.3.2012 15:56:58 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 16
seconds with 0 seconds of active time. This session ended with a crash.

Error - 14.8.2012 12:22:20 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1388
seconds with 1020 seconds of active time. This session ended with a crash.

Error - 14.8.2012 12:22:52 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7
seconds with 0 seconds of active time. This session ended with a crash.

Error - 8.9.2013 13:33:35 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1103
seconds with 780 seconds of active time. This session ended with a crash.

Error - 8.9.2013 13:34:02 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6
seconds with 0 seconds of active time. This session ended with a crash.

Error - 8.9.2013 13:34:27 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 12
seconds with 0 seconds of active time. This session ended with a crash.

Error - 8.9.2013 13:35:02 | Computer Name = Doma-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 26
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 12.11.2013 1:40:09 | Computer Name = Doma-PC | Source = Service Control Manager | ID = 7000
Description = Služba AODDriver4.1 neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 12.11.2013 4:47:51 | Computer Name = Doma-PC | Source = DCOM | ID = 10010
Description =


< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKLM\..\SearchScopes,DefaultScope =
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes,DefaultScope = {3E9BBE46-0020-4632-885E-BBCCFEC452D4}
  IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  IE - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..\SearchScopes\{3E9BBE46-0020-4632-885E-BBCCFEC452D4}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  
  FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
  FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll File not found
  FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  
  O2:64bit: - BHO: (DownlOad keepeeR) - {7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD} - C:\Program Files (x86)\DownlOad keepeeR\XPNH4H.x64.dll File not found
  O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O15 - HKU\S-1-5-21-4159004246-1342669911-4115328569-1001\..Trusted Domains: takata-petri.com ([portal] https in Trusted sites)
  O16:64bit: - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab (Reg Error: Key error.)
  O16:64bit: - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://31.133.9.122/activex/AMC.cab (Reg Error: Key error.)
  O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
  O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
  O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O33 - MountPoints2\{85e38ab7-42e0-11e3-9b73-00252225e630}\Shell - "" = AutoRun
  O33 - MountPoints2\{9c06e4cf-0ac4-11e0-919a-00252225e630}\Shell - "" = AutoRun
  O33 - MountPoints2\E\Shell - "" = AutoRun
  
  [7 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [15 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [11 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\*.tmp -> ]
  [6 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  
  [2013.11.12 09:26:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
  [2013.11.12 06:40:22 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2013.11.12 09:42:00 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  [2013.11.11 11:56:00 | 000,000,906 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job
  [2013.11.12 09:56:00 | 000,000,958 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "AdobeAAMUpdater-1.0"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "ICQ"=-
  "swg"=-
  "Skype"=-
  "Google Update"=-
  "Zoner Photo Studio Autoupdate"=-
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "SwitchBoard"=-
  "AdobeCS5ServiceManager"=-
  "VirtualCloneDrive"=-
  "Adobe ARM"=-
  "AMD AVT"=-
  "SunJavaUpdateSched"=-
  
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Takže log:
All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_USERS\S-1-5-21-4159004246-1342669911-4115328569-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-4159004246-1342669911-4115328569-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-4159004246-1342669911-4115328569-1001\Software\Microsoft\Internet Explorer\SearchScopes\{3E9BBE46-0020-4632-885E-BBCCFEC452D4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E9BBE46-0020-4632-885E-BBCCFEC452D4}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7EA57B77-0BCF-2EBA-D0DD-F77A988C1EAD}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-4159004246-1342669911-4115328569-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\takata-petri.com\portal\ deleted successfully.
Starting removal of ActiveX control {1ABA5FAC-1417-422B-BA82-45C35E2C908B}
C:\Windows\Downloaded Program Files\2020Player_IKEA.inf moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1ABA5FAC-1417-422B-BA82-45C35E2C908B}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ABA5FAC-1417-422B-BA82-45C35E2C908B}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{1ABA5FAC-1417-422B-BA82-45C35E2C908B}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ABA5FAC-1417-422B-BA82-45C35E2C908B}\ not found.
Starting removal of ActiveX control {DE625294-70E6-45ED-B895-CFFA13AEB044}
C:\Windows\Downloaded Program Files\setup.inf moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{DE625294-70E6-45ED-B895-CFFA13AEB044}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE625294-70E6-45ED-B895-CFFA13AEB044}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{DE625294-70E6-45ED-B895-CFFA13AEB044}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE625294-70E6-45ED-B895-CFFA13AEB044}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{85e38ab7-42e0-11e3-9b73-00252225e630}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{85e38ab7-42e0-11e3-9b73-00252225e630}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9c06e4cf-0ac4-11e0-919a-00252225e630}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9c06e4cf-0ac4-11e0-919a-00252225e630}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23A6.tmp\System.ServiceModel.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23A6.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP46EF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7AAF.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7D78.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9147.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB422.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP1871.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP2636.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3591.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3EFB.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP4308.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP81CC.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP8E2A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP925.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP9388.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP96F3.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPA794.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPB4AE.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPF23A.tmp folder deleted successfully.
C:\Windows\Installer\MSI1885.tmp deleted successfully.
C:\Windows\Installer\MSI30E4.tmp deleted successfully.
C:\Windows\Installer\MSI3125.tmp deleted successfully.
C:\Windows\Installer\MSI33A9.tmp deleted successfully.
C:\Windows\Installer\MSI38D1.tmp deleted successfully.
C:\Windows\Installer\MSI3AF9.tmp deleted successfully.
C:\Windows\Installer\MSI437F.tmp deleted successfully.
C:\Windows\Installer\MSI8B90.tmp deleted successfully.
C:\Windows\Installer\MSIAB22.tmp deleted successfully.
C:\Windows\Installer\MSIB92.tmp deleted successfully.
C:\Windows\Installer\MSIDFED.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\$dpx$.tmp\job.xml deleted successfully.
C:\Windows\SoftwareDistribution\Download\5f8ddf13b2c0a8d95484a04807947d35\$dpx$.tmp folder deleted successfully.
C:\Windows\Temp\IE43F3.tmp\Windows6.1-KB2533623-x64.cab deleted successfully.
C:\Windows\Temp\IE43F3.tmp folder deleted successfully.
C:\Windows\Temp\IE471E.tmp\Windows6.1-KB2670838-x64.cab deleted successfully.
C:\Windows\Temp\IE471E.tmp folder deleted successfully.
C:\Windows\Temp\is2326.tmp deleted successfully.
C:\Windows\Temp\is944E.tmp deleted successfully.
C:\Windows\Temp\TS_1F71.tmp deleted successfully.
C:\Windows\Temp\TS_208B.tmp deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001Core.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4159004246-1342669911-4115328569-1001UA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\VirtualCloneDrive deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AMD AVT deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Doma
->Temp folder emptied: 1535448012 bytes
->Temporary Internet Files folder emptied: 217490434 bytes
->Java cache emptied: 26233444 bytes
->Google Chrome cache emptied: 208313523 bytes
->Flash cache emptied: 173893 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 263459517 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42310898 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 751 bytes
RecycleBin emptied: 4116566329 bytes

Total Files Cleaned = 6 113,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Doma
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Doma
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 11122013_155422

Files\Folders moved on Reboot...
C:\Users\Doma\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SRUNTLB6\233265_4_0[1].eot not found!
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RT0ZNW3R\klubova-diskuse[1].htm not found!
C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NRRWWDUT\233265_4_0[1].woff moved successfully.
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\99XNN1RR\watch[1].htm not found!
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8UMI88BL\frame[1].htm not found!
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8UMI88BL\zbozi[1].htm not found!
C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\333GK0NS\233265_4_0[1].eot moved successfully.
File\Folder C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\333GK0NS\viewtopic[1].htm not found!
C:\Users\Doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\hsperfdata_DOMA-PC$\2380 not found!
File move failed. C:\Windows\temp\aircontrol2.pid scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Fajn, jak se chova PC

instalace/odinstalace jdou stále stejně pomalu, ale přibyl problém se zobrazováním mailů v aplikaci Windows live mail 2012 - stáhne se jen hlavička a při rozkliknutí je to naprosto bez textu.

Udelejte CDI dle kolegy

MiliNess píše:Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.

Otestujte HD pomoci HD Tune http://www.stahuj.centrum.cz/utility_a_ ... g/hd-tune/

• Udelejte testy Benchmark a Error Scan - dejte screeny
• Dejte screen ze zalozky Health
• Scree udelate kdyz klilknete na tu modrou disketku a pak jej sem dejte dle tohoto navdou http://forum.viry.cz/viewtopic.php?f=11&t=14114 - zajima Vas jen cast "zaslani na forum" samozrejme

Logy z CDI:
----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium Edition SP1 [6.1 Build 7601] (x64)
Date : 2013/11/12 20:23:26

-- Controller Map ----------------------------------------------------------
+ AMD SATA Controller [ATA]
- TSSTcorp CDDVDW SH-S223F SATA CdRom Device
- WDC WD10 EARS-003BB1 SATA Disk Device
- WDC WD64 00AADS-00M2B0 SATA Disk Device
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Virtual CloneDrive [SCSI]
- ELBY CLONEDRIVE SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) WDC WD10EARS-003BB1 : 1000,2 GB [0/0/0, pd1]
(2) WDC WD6400AADS-00M2B0 : 640,1 GB [1/0/0, pd1]

----------------------------------------------------------------------------
(1) WDC WD10EARS-003BB1
----------------------------------------------------------------------------
Model : WDC WD10EARS-003BB1
Firmware : 80.00A80
Serial Number : WD-WCAV5J881449
Disk Size : 1000,2 GB (8,4/137,4/1000,2)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 13017 hod.
Power On Count : 2134 krát
Temparature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., AAM, 48bit LBA, NCQ
APM Level : ----
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 135 132 _21 000000001840 Čas na roztočení ploten
04 _98 _98 __0 000000000867 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _83 _83 __0 0000000032D9 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _98 _98 __0 000000000856 Počet cyklů zapnutí zařízení
C0 200 200 __0 00000000001E Počet vypnutí disku
C1 134 134 __0 000000030863 Počet cyklů načítání/vymazání
C2 111 103 __0 000000000024 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 354A 354A 3838 3134 3439
020: 0000 0000 0032 3830 2E30 3830 3830 5744 4320 5744
030: 3130 4541 5253 2D30 3033 3120 3120 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 003F 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 1706 1706 0000 0044 0044
080: 01FE 0000 746B 7F61 4123 BC41 BC41 4123 407F 0072
090: 0072 0000 FFFE 0000 80FE 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 052D EE93 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 3035 3035 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 101E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 24A5

----------------------------------------------------------------------------
(2) WDC WD6400AADS-00M2B0
----------------------------------------------------------------------------
Model : WDC WD6400AADS-00M2B0
Firmware : 01.00A01
Serial Number : WD-WCAV52899600
Disk Size : 640,1 GB (8,4/137,4/640,1)
Buffer Size : 32767 KB
Queue Depth : 32
# of Sectors : 1250263728
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 14322 hod.
Power On Count : 2807 krát
Temparature : 33 C (91 F)
Health Status : Dobrý
Features : S.M.A.R.T., AAM, 48bit LBA, NCQ
APM Level : ----
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 112 107 _21 000000001CD7 Čas na roztočení ploten
04 _91 _91 __0 000000002452 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _81 _81 __0 0000000037F2 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _98 _98 __0 000000000AF7 Počet cyklů zapnutí zařízení
C0 200 200 __0 00000000003C Počet vypnutí disku
C1 171 171 __0 000000015A6B Počet cyklů načítání/vymazání
C2 114 _92 __0 000000000021 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 3532 3532 3839 3936 3030
020: 0000 FFFF 0032 3031 2E30 3031 3031 5744 4320 5744
030: 3634 3030 4141 4453 2D30 3242 3242 3020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 003F 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 1706 1706 0000 0044 0044
080: 01FE 0000 746B 7F61 4123 BC41 BC41 4123 407F 0043
090: 0043 0000 FFFE 0000 80FE 0000 0000 0000 0000 0000
100: 82B0 4A85 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 58D2 4A2E 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 16CE 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 3037 3037 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 101E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 AFA5

Benchmark

Health

Stahnete Farbar Service Scanner http://download.bleepingcomputer.com/farbar/FSS.exe

• Ulozte nejlepe na Plochu
• U vsech polozek udelejte zatrzitko (tim je oznacite pro skenovani)
• Kliknete na Scan
• Po dokonceni skenu se objevi log FSS.txt ten sem vlozte

Stahnete Service Repair http://kb.eset.com/library/ESET/KB%20Te ... Repair.exe

• Ulozte nejlepe na Plochu
• Spustte a potvrdte Yes abyste potvrdil reinstalaci sluzeb
• Nasledne kliknutim na Yes potvrdte restart PC
• Na Plose vznikne slozka CC Support, najdete tam log SvcRepair.txt - mel by byt CC Support\Logs\SvcRepair.txt - vlozte mi jej sem

FSS:
Farbar Service Scanner Version: 10-11-2013
Ran by Doma (administrator) on 13-11-2013 at 07:20:44
Running from "C:\Users\Doma\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys
[2013-10-11 05:15] - [2013-09-14 02:10] - 0497152 ____A (Microsoft Corporation) 314C17917AC8523EC77A710215012A65

C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-10-11 05:15] - [2013-09-08 03:30] - 1903552 ____A (Microsoft Corporation) 40AF23633D197905F03AB5628C558C51

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

SVC:
Log Opened: 2013-11-13 @ 07:21:32
07:21:32 - -----------------
07:21:32 - | Begin Logging |
07:21:32 - -----------------
07:21:32 - Fix started on a WIN_7 X64 computer
07:21:32 - Prep in progress. Please Wait.
07:21:33 - Prep complete
07:21:33 - Repairing Services Now. Please wait...
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\BFE.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\SubLayer>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\Provider>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\Filter>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\BootTime\Filter>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\BootTime>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\BITS.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Performance>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\iphlpsvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Teredo\{FA88062C-9A61-4C1E-AC45-7143F8F01AAD}>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Isatap\{8AD2FB26-F91E-44F1-9B24-3C0AE56C9CE0}>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Isatap>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\IPHTTPS>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Interfaces>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\config>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\MpsSvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\RPC-EPMap>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\IPTLSOut>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\IPTLSIn>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\DHCP>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\SharedAccess.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable\System>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Epoch2>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Epoch>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\WinDefend.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\TriggerInfo\0>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\TriggerInfo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\wscsvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\wuauserv.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv>

SetACL finished successfully.
07:21:34 - Services Repair Complete.
07:21:39 - Reboot Initiated