VIRY.CZ

Dobry vecer, moc prosim o kontrolu, pocitac se mi zda zpomaleny. Dekuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by Scarlett at 2013-12-28 18:32:56
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 1224 GB (64%) free of 1908 GB
Total RAM: 8175 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:33:09, on 28.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Scarlett.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\4dfd2b09-0fc7-4acf-9d20-e50fbafab384.exe /check
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" /MINIMIZED
O4 - Startup: CurseClientStartup.ccip
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\Windows\SysWOW64\ssins.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Program Files\TightVNC\tvnserver.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9831 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
taskeng.exe {34065386-72D6-458C-BF94-EB58795B7B4B}
"C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\Microsoft LifeCam\MSCamS64.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe"
"C:\Program Files\TightVNC\tvnserver.exe" -service
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2768
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
RPMDaemon.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\TightVNC\tvnserver.exe" -controlservice -slave
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
"C:\Users\Scarlett\AppData\Local\Apps\2.0\62JKL7J5.8KC\8V5PJGJL.M05\curs..tion_9e9e83ddf3ed3ead_0005.0001_181b5e0542e9eb6c\CurseClient.exe"
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe" /hide
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5912.0.2008928224\1233067649" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --gpu-vendor-id=0x1002 --gpu-device-id=0x6719 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=12.104.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group4 pct:10c stable:r7 use_cacheable_ntp:1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_31/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="5912.2.461544743\1882249399" /prefetch:673131151
"taskhost.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group4 pct:10c stable:r7 use_cacheable_ntp:1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_31/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="5912.17.482888882\2013951693" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5912.18.927358885\485756929" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group4 pct:10c stable:r7 use_cacheable_ntp:1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-1-Percent/group_31/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="5912.19.130362916\1419577116" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe75_ Global\UsGthrCtrlFltPipeMssGthrPipe75 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Scarlett\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30 245592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
GBHO.BHO - C:\Windows\system32\mscoree.dll [2010-11-21 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30 201784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1d09c093-f71e-43c3-b948-19316cbd695e} - Smart Recovery 2 - C:\Windows\system32\mscoree.dll [2010-11-21 444752]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30 245592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30 201784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-02-11 11776104]
"tvncontrol"=C:\Program Files\TightVNC\tvnserver.exe [2013-05-24 2122224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RPMKickstart"=C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe [2010-08-23 2552320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"uTorrent"=C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe [2013-12-03 900440]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-08-30 4858968]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2012-09-13 204136]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-28 642656]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2013-06-28 2255184]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"LifeCam"=C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"20131121"=C:\Program Files\AVAST Software\Avast\setup\emupdate\4dfd2b09-0fc7-4acf-9d20-e50fbafab384.exe [2013-11-23 180184]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-11-02 152392]

C:\Users\Scarlett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CurseClientStartup.ccip

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-28 13:31:36 ----SHD---- C:\Config.Msi
2013-12-23 11:32:53 ----D---- C:\ProgramData\Curse Client
2013-12-16 20:24:10 ----D---- C:\GOG Games
2013-12-15 14:21:12 ----D---- C:\Program Files (x86)\Hearthstone
2013-12-15 01:16:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 01:16:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-15 01:16:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-15 01:16:15 ----A---- C:\Windows\system32\ieui.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\iesetup.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\iernonce.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-15 01:16:15 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-15 01:16:15 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-15 01:16:14 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-15 01:16:14 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-15 01:16:14 ----A---- C:\Windows\system32\mshtml.dll
2013-12-15 01:16:14 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-15 01:16:14 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-15 01:16:13 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-15 01:16:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-15 01:16:13 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-15 01:16:13 ----A---- C:\Windows\system32\wininet.dll
2013-12-15 01:16:13 ----A---- C:\Windows\system32\urlmon.dll
2013-12-15 01:16:13 ----A---- C:\Windows\system32\iertutil.dll
2013-12-15 01:16:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-15 01:16:12 ----A---- C:\Windows\system32\ieframe.dll
2013-12-15 01:16:11 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-15 01:16:11 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-15 01:16:11 ----A---- C:\Windows\system32\jscript9.dll
2013-12-14 00:51:14 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-12-14 00:51:14 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\url.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-12-14 00:51:12 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\wextract.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\webcheck.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\vbscript.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\url.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\pngfilt.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\occache.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\msrating.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\msls31.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\mshtmler.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\mshtmled.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\mshta.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\msfeedssync.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\msfeeds.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\licmgr10.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\jsIntl.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\jscript.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\inseng.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\imgutil.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\iexpress.exe
2013-12-14 00:51:12 ----A---- C:\Windows\system32\iesysprep.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\iepeers.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\iedkcs32.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\ieapfltr.dat
2013-12-14 00:51:12 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\icardie.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\elshyph.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\dxtrans.dll
2013-12-14 00:51:12 ----A---- C:\Windows\system32\dxtmsft.dll
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\user.exe
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-12-14 00:50:09 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-12-14 00:50:09 ----A---- C:\Windows\system32\wow64.dll
2013-12-14 00:50:09 ----A---- C:\Windows\system32\tdh.dll
2013-12-14 00:50:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-12-14 00:50:09 ----A---- C:\Windows\system32\ntdll.dll
2013-12-14 00:50:09 ----A---- C:\Windows\system32\advapi32.dll
2013-12-14 00:49:36 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-12-14 00:49:36 ----A---- C:\Windows\system32\mswsock.dll
2013-12-14 00:49:36 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-12-14 00:49:13 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-12-14 00:49:13 ----A---- C:\Windows\system32\d3d11.dll
2013-12-13 19:14:14 ----A---- C:\Windows\system32\win32k.sys
2013-12-13 19:14:13 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-13 19:14:13 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-13 19:14:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-13 19:14:12 ----A---- C:\Windows\system32\tzres.dll
2013-12-13 19:14:10 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-13 19:14:10 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-13 19:14:09 ----A---- C:\Windows\system32\scrrun.dll
2013-12-13 19:14:09 ----A---- C:\Windows\system32\cscript.exe
2013-12-13 19:14:08 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-13 19:14:08 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-13 19:14:08 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-13 19:14:08 ----A---- C:\Windows\system32\wscript.exe
2013-12-11 14:00:31 ----D---- C:\Users\Scarlett\AppData\Roaming\HD Tune Pro
2013-12-02 22:31:12 ----D---- C:\ProgramData\2DBoy
2013-12-02 22:30:54 ----D---- C:\Program Files (x86)\WorldOfGoo
2013-12-02 18:32:43 ----D---- C:\Program Files\iPod
2013-12-02 18:32:42 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-12-02 18:32:42 ----D---- C:\Program Files\iTunes
2013-12-02 18:32:42 ----D---- C:\Program Files (x86)\iTunes
2013-12-02 18:28:14 ----D---- C:\Program Files (x86)\QuickTime

======List of files/folders modified in the last 1 month======

2013-12-28 18:33:08 ----D---- C:\Windows\Temp
2013-12-28 18:33:08 ----D---- C:\Program Files\trend micro
2013-12-28 18:32:51 ----D---- C:\Users\Scarlett\AppData\Roaming\uTorrent
2013-12-28 18:27:56 ----D---- C:\Program Files (x86)\Steam
2013-12-28 15:55:37 ----D---- C:\Windows\system32\config
2013-12-28 15:34:32 ----D---- C:\Windows\Microsoft.NET
2013-12-28 13:35:05 ----SHD---- C:\Windows\Installer
2013-12-28 13:34:58 ----RSD---- C:\Windows\assembly
2013-12-28 13:34:41 ----SHD---- C:\System Volume Information
2013-12-28 13:33:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-12-28 13:33:47 ----D---- C:\Windows\system32\cs-CZ
2013-12-28 13:32:24 ----D---- C:\Windows\System32
2013-12-28 13:32:24 ----D---- C:\Windows\inf
2013-12-28 13:32:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-28 13:31:54 ----D---- C:\Windows\SysWOW64
2013-12-28 13:31:49 ----D---- C:\Windows\SYSWOW64\en-US
2013-12-28 13:31:48 ----D---- C:\Windows\system32\en-US
2013-12-28 13:31:37 ----D---- C:\Windows\Prefetch
2013-12-28 13:31:04 ----D---- C:\Windows
2013-12-26 02:00:40 ----D---- C:\Users\Scarlett\AppData\Roaming\vlc
2013-12-25 21:19:33 ----D---- C:\Users\Scarlett\AppData\Roaming\TS3Client
2013-12-25 17:29:19 ----D---- C:\Program Files (x86)\Origin Games
2013-12-25 17:27:20 ----D---- C:\Program Files (x86)\Origin
2013-12-25 12:39:04 ----D---- C:\Program Files (x86)\World of Warcraft
2013-12-25 12:38:33 ----D---- C:\Program Files (x86)\Battle.net
2013-12-25 09:54:18 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2013-12-25 00:02:14 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-12-24 19:52:51 ----D---- C:\Users\Scarlett\AppData\Roaming\Bioshock
2013-12-23 11:32:53 ----HD---- C:\ProgramData
2013-12-22 15:26:52 ----HD---- C:\Windows\msdownld.tmp
2013-12-22 15:26:51 ----D---- C:\Windows\SYSWOW64\directx
2013-12-16 16:12:27 ----D---- C:\Windows\Logs
2013-12-15 21:06:55 ----D---- C:\Users\Scarlett\AppData\Roaming\Skype
2013-12-15 14:21:13 ----RD---- C:\Program Files (x86)
2013-12-15 12:35:00 ----D---- C:\Windows\winsxs
2013-12-15 12:34:05 ----D---- C:\Program Files\Internet Explorer
2013-12-15 12:34:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-15 01:16:26 ----D---- C:\Windows\system32\catroot2
2013-12-15 01:16:26 ----D---- C:\Windows\system32\catroot
2013-12-15 01:14:53 ----D---- C:\Windows\system32\MRT
2013-12-15 01:14:52 ----D---- C:\Windows\debug
2013-12-15 01:14:49 ----A---- C:\Windows\system32\MRT.exe
2013-12-14 12:50:19 ----D---- C:\Windows\rescache
2013-12-14 10:11:14 ----D---- C:\Windows\Panther
2013-12-14 10:08:49 ----D---- C:\Windows\SYSWOW64\migration
2013-12-14 10:08:47 ----D---- C:\Windows\system32\migration
2013-12-14 10:08:47 ----D---- C:\Windows\PolicyDefinitions
2013-12-14 10:08:44 ----D---- C:\Windows\AppPatch
2013-12-14 10:08:43 ----D---- C:\Windows\system32\drivers
2013-12-14 10:08:39 ----D---- C:\Windows\system32\DriverStore
2013-12-13 20:33:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-12-13 19:15:34 ----D---- C:\Program Files (x86)\Diablo III
2013-12-12 10:53:31 ----RD---- C:\Program Files (x86)\Skype
2013-12-12 10:53:31 ----D---- C:\ProgramData\Skype
2013-12-12 10:44:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-12-12 10:44:56 ----D---- C:\Program Files (x86)\GIGABYTE
2013-12-04 19:05:35 ----D---- C:\Program Files (x86)\coolpro2
2013-12-04 09:45:58 ----D---- C:\Users\Scarlett\AppData\Roaming\DAEMON Tools Lite
2013-12-04 09:44:14 ----D---- C:\Program Files\CCleaner
2013-12-03 15:32:35 ----D---- C:\Users\Scarlett\AppData\Roaming\Apple Computer
2013-12-02 18:32:43 ----RD---- C:\Program Files
2013-12-02 18:29:13 ----D---- C:\Program Files\Common Files\Apple

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-08-30 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-08-30 204880]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-08-30 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-08-30 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-08-30 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-08-30 64288]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-11 283064]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-08-30 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-08-30 80816]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-29 11658752]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-29 581120]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-02-14 96768]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-03-07 40832]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-03-07 65280]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2013-12-28 25640]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-02-11 2739176]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
S2 BstHdDrv;BlueStacks Hypervisor; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys []
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2013-07-25 79592]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2013-07-25 86376]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2013-03-16 30528]
S3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-09-21 351520]
S3 LVUVC64;Logitech HD Pro Webcam C920(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-09-21 4763680]
S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 36720]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-08-17 171008]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-29 241152]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-08-30 46808]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2013-06-28 2470736]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS64.exe [2010-12-13 194416]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-02 76888]
R2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 TeamViewer8;TeamViewer 8; C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 5087584]
R2 tvnserver;TightVNC Server; C:\Program Files\TightVNC\tvnserver.exe [2013-05-24 2122224]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-03 116648]
S2 ssinstall;SInstalátor; C:\Windows\SysWOW64\ssins.exe [2013-10-04 2324216]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13 257416]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-03 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-22 119408]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-12-11 569768]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-03 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

# AdwCleaner v3.016 - Report created 28/12/2013 at 23:42:08
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Scarlett - SCARLETT-PC
# Running from : C:\Users\Scarlett\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKCU\Software\Softonic

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1743 octets] - [05/09/2013 14:09:10]
AdwCleaner[R1].txt - [1133 octets] - [28/12/2013 23:40:58]
AdwCleaner[S0].txt - [1834 octets] - [05/09/2013 14:09:53]
AdwCleaner[S1].txt - [1019 octets] - [28/12/2013 23:42:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1079 octets] ##########

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.12.28.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Scarlett :: SCARLETT-PC [administrátor]

Ochrana: Povolena

28.12.2013 23:53:56
MBAM-log-2013-12-29 (10-31-46).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 564253
Uplynulý čas: 1 hodin, 48 minut, 34 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Program Files (x86)\MacroRecorder\extp.etl (Trojan.Dropper.CL) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\MacroRecorder\app.publish\Application Files\MacroRecorder_5_6_0_4\extp.etl.deploy (Trojan.Dropper.CL) -> Nebyla provedena žádná instrukce.
C:\Users\Scarlett\AppData\Local\Temp\KMP_3.7.0.113.exe (PUP.Optional.Softonic.A) -> Nebyla provedena žádná instrukce.

(konec)

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL logfile created on: 29.12.2013 11:53:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Scarlett\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,98 Gb Total Physical Memory | 5,11 Gb Available Physical Memory | 64,02% Memory free
15,97 Gb Paging File | 12,60 Gb Available in Paging File | 78,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1862,92 Gb Total Space | 1201,73 Gb Free Space | 64,51% Space Free | Partition Type: NTFS
Drive E: | 2,60 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: SCARLETT-PC | User Name: Scarlett | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.12.29 11:51:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Scarlett\Downloads\OTL.exe
PRC - [2013.12.04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013.12.03 12:47:58 | 000,900,440 | ---- | M] (BitTorrent Inc.) -- C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe
PRC - [2013.10.02 12:45:43 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013.10.01 13:14:40 | 005,087,584 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013.08.30 08:47:34 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.08.30 08:47:33 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.06.28 13:02:06 | 002,255,184 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2013.05.11 11:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013.04.04 14:50:32 | 000,887,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013.04.04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.09.13 00:38:44 | 000,204,136 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2012.09.13 00:38:20 | 000,264,040 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
PRC - [2010.04.22 15:05:26 | 001,011,712 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe
PRC - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
PRC - [2009.06.17 16:13:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe


========== Modules (No Company Name) ==========

MOD - [2013.12.04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll
MOD - [2013.12.04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
MOD - [2013.12.04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
MOD - [2013.12.04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
MOD - [2013.12.04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
MOD - [2013.04.21 20:44:32 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013.04.21 20:44:04 | 001,242,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012.09.13 00:39:18 | 000,336,232 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
MOD - [2012.09.13 00:38:52 | 007,955,304 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2012.09.13 00:38:52 | 000,341,352 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2012.09.13 00:38:52 | 000,127,336 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2012.09.13 00:38:52 | 000,028,008 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2012.09.13 00:38:44 | 002,144,104 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2012.09.13 00:38:20 | 000,264,040 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe


========== Services (SafeList) ==========

SRV:64bit: - [2013.11.26 10:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013.08.30 08:47:33 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013.05.24 11:46:40 | 002,122,224 | ---- | M] (GlavSoft LLC.) [Auto | Running] -- C:\Program Files\TightVNC\tvnserver.exe -- (tvnserver)
SRV:64bit: - [2013.03.29 02:34:18 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.12.13 13:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2013.12.13 20:33:08 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.12.11 20:40:36 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.11.22 09:53:37 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.10.04 07:10:48 | 002,324,216 | ---- | M] (PS Media s.r.o.) [Auto | Stopped] -- C:\Windows\SysWOW64\ssins.exe -- (ssinstall)
SRV - [2013.10.02 12:45:43 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013.10.01 13:14:40 | 005,087,584 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013.06.28 13:02:04 | 002,470,736 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013.05.11 11:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe -- (Smart TimeLock)
SRV - [2009.06.17 16:13:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe -- (DES2 Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.08.30 08:48:10 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.08.30 08:48:10 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.08.30 08:48:10 | 000,204,880 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.08.30 08:48:10 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.08.30 08:48:10 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.08.30 08:48:10 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.08.30 08:48:09 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.08.30 08:48:09 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.08.11 14:45:26 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013.07.25 12:32:08 | 000,086,376 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftser2k.sys -- (FTSER2K)
DRV:64bit: - [2013.07.25 12:32:08 | 000,079,592 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftdibus.sys -- (FTDIBUS)
DRV:64bit: - [2013.04.04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013.03.29 03:35:02 | 011,658,752 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013.03.29 02:09:44 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013.02.14 12:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.12.13 12:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.09.21 20:04:22 | 004,763,680 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2012.09.21 20:04:22 | 000,351,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.08.17 09:04:34 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:64bit: - [2011.08.17 08:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.07 10:22:00 | 000,065,280 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011.03.07 10:22:00 | 000,040,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011.01.13 12:58:00 | 000,413,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.01.10 18:16:08 | 000,021,104 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010.12.13 13:37:18 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.10.19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2013.12.28 23:43:20 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2013.03.16 03:32:58 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE10SR
IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.4: C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.1.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.1.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2013.03.04 13:27:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Scarlett\AppData\Roaming\Mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Uplay PC (Enabled) = C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - Extension: Disk Google = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Adblock Plus = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Pen\u011B\u017Eenka Google = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013.04.11 16:16:00 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [tvncontrol] C:\Program Files\TightVNC\tvnserver.exe (GlavSoft LLC.)
O4 - HKLM..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\4dfd2b09-0fc7-4acf-9d20-e50fbafab384.exe (AVAST Software)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-1571891557-798081717-1029897310-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-1571891557-798081717-1029897310-1000..\Run: [uTorrent] C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe (BitTorrent Inc.)
O4:64bit: - HKLM..\RunOnce: [RPMKickstart] C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe (Gigabyte Technology CO., LTD.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\Scarlett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: localhost ([]http in Internet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A2CE0F14-721A-477E-B3FB-C35C2308E3DA}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.09.10 04:36:21 | 000,000,060 | R--- | M] () - E:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{f32b7ee3-0261-11e3-9043-1c6f65d964fc}\Shell - "" = AutoRun
O33 - MountPoints2\{f32b7ee3-0261-11e3-9043-1c6f65d964fc}\Shell\AutoRun\command - "" = E:\Setup.exe -- [2013.09.10 18:27:13 | 001,874,543 | R--- | M] ( )
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013.12.28 23:48:53 | 000,000,000 | ---D | C] -- C:\Users\Scarlett\AppData\Roaming\Malwarebytes
[2013.12.28 23:48:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.12.28 23:48:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.12.28 23:48:40 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.12.28 23:48:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.12.28 13:31:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013.12.25 17:37:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 1942
[2013.12.23 11:32:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Curse Client
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2013.12.29 11:54:25 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.12.29 11:33:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.12.29 11:18:00 | 000,000,956 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.12.28 23:51:41 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.12.28 23:51:41 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.12.28 23:48:43 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.12.28 23:48:35 | 001,577,410 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.12.28 23:48:35 | 000,666,406 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.12.28 23:48:35 | 000,652,150 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.12.28 23:48:35 | 000,140,102 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.12.28 23:48:35 | 000,121,082 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.12.28 23:43:35 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.12.28 23:43:20 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2013.12.28 23:43:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.12.28 23:43:09 | 2134,204,415 | -HS- | M] () -- C:\hiberfil.sys
[2013.12.28 13:09:33 | 000,000,222 | ---- | M] () -- C:\Users\Scarlett\Desktop\Gnomoria.url
[2013.12.25 00:02:14 | 000,290,184 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013.12.25 00:02:14 | 000,290,184 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.12.25 00:02:07 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.12.29 11:54:25 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.12.28 23:48:43 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.12.28 13:09:33 | 000,000,222 | ---- | C] () -- C:\Users\Scarlett\Desktop\Gnomoria.url
[2013.09.22 15:19:44 | 000,117,604 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2013.03.29 03:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013.03.29 03:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2013.03.16 15:17:58 | 000,015,872 | ---- | C] () -- C:\Users\Scarlett\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.03.14 19:58:41 | 001,555,696 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.03.05 21:55:20 | 000,290,184 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013.03.05 21:55:19 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013.03.05 21:55:18 | 000,840,264 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2013.03.02 21:16:36 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2013.03.02 21:15:58 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.03.02 20:55:42 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2013.03.02 20:48:42 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2012.12.19 20:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.12.19 20:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.11.27 00:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.09.21 20:08:36 | 010,919,784 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012.09.21 20:08:36 | 000,338,136 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012.09.21 20:08:36 | 000,103,272 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.05.01 11:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Ashampoo
[2013.03.16 15:17:34 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Audacity
[2013.10.15 23:13:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Battle.net
[2013.12.24 19:52:51 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Bioshock
[2013.03.25 16:15:59 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Bioshock2
[2013.04.04 18:23:56 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Curse Advertising
[2013.12.04 09:45:58 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\DAEMON Tools Lite
[2013.08.29 10:08:11 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\DVDVideoSoft
[2013.11.24 19:12:49 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\EVE IPH
[2013.08.29 10:02:55 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\FreeFLVConverter
[2013.04.06 22:49:37 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\GetRightToGo
[2013.03.03 01:42:43 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\GHISLER
[2013.12.11 14:00:31 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\HD Tune Pro
[2013.03.22 09:49:14 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Leadertech
[2013.03.11 15:27:45 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\LibreOffice
[2013.03.04 12:43:28 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Lionhead Studios
[2013.10.02 11:04:39 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Little Inferno
[2013.07.19 20:18:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Mumble
[2013.08.15 15:06:13 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Origin
[2013.06.01 20:18:37 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Rovio
[2013.03.02 23:06:06 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Sports Interactive
[2013.06.02 20:43:22 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TeamViewer
[2013.03.04 13:27:03 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Thunderbird
[2013.06.04 00:17:55 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TightVNC
[2013.07.24 11:10:39 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Trine2
[2013.10.09 23:08:18 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Tropico 3
[2013.12.28 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TS3Client
[2013.04.06 22:58:57 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Ubisoft
[2013.12.29 11:57:49 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\uTorrent
[2013.10.04 11:34:56 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\wargaming.net

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,032,548 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.04.13 13:18:16 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.09.03 12:01:54 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.09.03 12:01:55 | 000,000,956 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.05.08 07:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
[2013.12.14 00:49:36 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013.12.14 00:49:36 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2010.11.21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.12.14 00:49:36 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2013.05.08 07:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
[2013.07.06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

< >

< %systemroot%*.* /U /s >
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[65 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[3 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[2 C:\*.tmp files -> C:\*.tmp -> ]

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013.03.11 18:14:45 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Adobe
[2013.12.03 15:32:35 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Apple Computer
[2013.05.01 11:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Ashampoo
[2013.03.03 12:14:43 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\ATI
[2013.03.16 15:17:34 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Audacity
[2013.10.15 23:13:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Battle.net
[2013.12.24 19:52:51 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Bioshock
[2013.03.25 16:15:59 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Bioshock2
[2013.04.04 18:23:56 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Curse Advertising
[2013.12.04 09:45:58 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\DAEMON Tools Lite
[2013.08.29 10:08:11 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\DVDVideoSoft
[2013.11.24 19:12:49 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\EVE IPH
[2013.08.29 10:02:55 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\FreeFLVConverter
[2013.04.06 22:49:37 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\GetRightToGo
[2013.03.03 01:42:43 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\GHISLER
[2013.12.11 14:00:31 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\HD Tune Pro
[2013.03.02 20:46:59 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Identities
[2013.03.02 20:55:10 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\InstallShield
[2013.03.22 09:49:14 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Leadertech
[2013.03.11 15:27:45 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\LibreOffice
[2013.03.04 12:43:28 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Lionhead Studios
[2013.10.02 11:04:39 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Little Inferno
[2013.03.19 22:13:15 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Macromedia
[2013.12.28 23:48:53 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Malwarebytes
[2011.04.12 09:45:23 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Media Center Programs
[2013.08.29 14:25:46 | 000,000,000 | --SD | M] -- C:\Users\Scarlett\AppData\Roaming\Microsoft
[2013.03.04 13:27:03 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Mozilla
[2013.07.19 20:18:26 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Mumble
[2013.08.15 15:06:13 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Origin
[2013.06.01 20:18:37 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Rovio
[2013.03.25 10:50:21 | 000,000,000 | RH-D | M] -- C:\Users\Scarlett\AppData\Roaming\SecuROM
[2013.12.15 21:06:55 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Skype
[2013.03.02 23:06:06 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Sports Interactive
[2013.06.02 20:43:22 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TeamViewer
[2013.03.04 13:27:03 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Thunderbird
[2013.06.04 00:17:55 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TightVNC
[2013.07.24 11:10:39 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Trine2
[2013.10.09 23:08:18 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Tropico 3
[2013.12.28 23:39:20 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\TS3Client
[2013.04.06 22:58:57 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\Ubisoft
[2013.12.29 12:06:00 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\uTorrent
[2013.12.26 02:00:40 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\vlc
[2013.10.04 11:34:56 | 000,000,000 | ---D | M] -- C:\Users\Scarlett\AppData\Roaming\wargaming.net

< %APPDATA%\*.exe /s >
[2013.11.18 21:11:50 | 001,319,424 | ---- | M] () -- C:\Users\Scarlett\AppData\Roaming\EVE IPH\EVE Isk per Hour\EVEIPH\EVE Isk per Hour.exe
[2013.11.27 22:34:41 | 000,059,904 | ---- | M] (Home) -- C:\Users\Scarlett\AppData\Roaming\EVE IPH\EVE Isk per Hour\EVEIPH\EVEIPH Updater.exe
[2013.03.22 09:49:14 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Scarlett\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
[2013.10.06 09:00:00 | 001,141,328 | ---- | M] (BitTorrent Inc.) -- C:\Users\Scarlett\AppData\Roaming\uTorrent\utorrent.exe
[2013.10.06 09:00:00 | 001,141,328 | ---- | M] (BitTorrent Inc.) -- C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30180.exe
[2013.12.03 12:47:58 | 000,900,440 | ---- | M] (BitTorrent Inc.) -- C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013.12.29 11:33:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.12.28 23:43:35 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.12.29 11:18:00 | 000,000,956 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.12.28 23:43:23 | 000,000,000 | ---- | M] () -- C:\Windows\system32\sinstall.log

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[2 C:\*.tmp files -> C:\*.tmp -> ]

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013.07.03 14:16:46 | 003,673,184 | ---- | M] (Disc Soft Ltd)
"uTorrent" = "C:\Users\Scarlett\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe" /MINIMIZED -- [2013.12.03 12:47:58 | 000,900,440 | ---- | M] (BitTorrent Inc.)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2013.12.14 00:51:12 | 000,806,096 | ---- | M] (Microsoft Corporation) MD5=C8A8321292A459B0A17FB39A782A5C74 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2013.12.04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) MD5=376A9B411BF8B77D5BF84B24D0C7DACD -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.12.29 11:54:25 | 000,000,512 | ---- | M] () MD5=FF02B6E658A534CE2DC4D62DBE9D9C13 -- C:\PhysicalMBR.bin
[2 C:\*.tmp files -> C:\*.tmp -> ]

< >

< *crack* /s >
[2013.09.11 10:23:41 | 001,398,228 | ---- | M] () -- \Games\World_of_Warplanes\res\maps\landscape\02_el_hallouf\02_el_hallouf_cracks.dds
[2013.09.10 16:48:52 | 000,053,770 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\sounds\events\reactor\afx_reactor_glass_pane_crack.ogg
[2013.09.10 16:48:52 | 000,000,345 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\sounds\events\reactor\afx_reactor_glass_pane_crack.snt
[2013.09.10 16:49:10 | 000,013,009 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\castlebase\ceiling\corridor_crack.dae
[2013.09.10 16:49:10 | 000,008,287 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\castlebase\ceiling\corridor_crack.msh
[2013.09.10 16:49:16 | 000,094,462 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\cellarbase\special\cracked_ceiling.dae
[2013.09.10 16:49:16 | 000,065,008 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\cellarbase\special\cracked_ceiling.msh
[2013.09.10 16:49:18 | 000,349,680 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue.dds
[2013.09.10 16:49:18 | 000,000,932 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue.mat
[2013.09.10 16:49:18 | 000,016,101 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue01.dae
[2013.09.10 16:49:18 | 000,001,224 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue01.msh
[2013.09.10 16:49:18 | 000,016,053 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue02.dae
[2013.09.10 16:49:18 | 000,001,224 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue02.msh
[2013.09.10 16:49:18 | 000,016,053 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue03.dae
[2013.09.10 16:49:18 | 000,001,224 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue03.msh
[2013.09.10 16:49:18 | 000,016,053 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue04.dae
[2013.09.10 16:49:18 | 000,001,224 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue04.msh
[2013.09.10 16:49:18 | 000,349,680 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue_back.dds
[2013.09.10 16:49:18 | 000,000,410 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_blue_back.mat
[2013.09.10 16:49:18 | 000,349,680 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown.dds
[2013.09.10 16:49:18 | 000,000,933 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown.mat
[2013.09.10 16:49:18 | 000,016,057 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown01.dae
[2013.09.10 16:49:18 | 000,001,226 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown01.msh
[2013.09.10 16:49:18 | 000,016,057 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown02.dae
[2013.09.10 16:49:18 | 000,001,226 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown02.msh
[2013.09.10 16:49:18 | 000,016,057 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown03.dae
[2013.09.10 16:49:18 | 000,001,226 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown03.msh
[2013.09.10 16:49:18 | 000,016,057 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown04.dae
[2013.09.10 16:49:18 | 000,001,226 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown04.msh
[2013.09.10 16:49:18 | 000,349,680 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown_back.dds
[2013.09.10 16:49:18 | 000,000,409 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_brown_back.mat
[2013.09.10 16:49:18 | 000,349,680 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_nrm.dds
[2013.09.10 16:49:18 | 000,043,832 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\decals\cracks_spec.dds
[2013.09.10 16:49:18 | 000,062,915 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\dungeonbase\ceiling\default_cracked.dae
[2013.09.10 16:49:18 | 000,037,027 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\dungeonbase\ceiling\default_cracked.msh
[2013.09.10 16:49:22 | 000,019,532 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\dungeonbase\wall\corridor_graves_cracked.dae
[2013.09.10 16:49:22 | 000,016,611 | ---- | M] () -- \Program Files (x86)\Frictional Games\Amnesia A Machine for Pigs\static_objects\dungeonbase\wall\corridor_graves_cracked.msh
[2013.08.02 22:36:02 | 000,076,652 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Nature\Ground\dirt01_cracked_0.xnb
[2013.08.02 22:35:50 | 000,034,846 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Nature\Ground\dirt01_cracked_NRM_0.xnb
[2013.08.02 22:35:51 | 000,063,448 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\floor_cracks_0.xnb
[2013.08.02 22:35:18 | 000,037,594 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\floor_cracks_nrm_0.xnb
[2013.08.02 22:35:14 | 000,004,354 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\pillar_cracked00_0.xnb
[2013.08.02 22:36:00 | 000,004,058 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\pillar_cracked00_NRM02_0.xnb
[2013.08.02 22:33:28 | 000,008,140 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\wall_cracked00_0.xnb
[2013.08.02 22:34:28 | 000,018,032 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\wall_cracked01_0.xnb
[2013.08.02 22:35:18 | 000,008,364 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Magicka\Content\Levels\Textures\Surface\Structure\Stone\wall_cracked_NRM_0.xnb
[2013.11.07 12:26:17 | 000,013,160 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\gm\cracks.gm1
[2013.12.04 18:53:35 | 000,006,129 | ---- | M] () -- \Users\Scarlett\AppData\Roaming\uTorrent\Cool Edit Pro 2.1 with Crack.torrent

< *keygen* /s >
[2013.12.04 18:53:55 | 000,005,183 | ---- | M] () -- \Users\Scarlett\Downloads\Crack\KEYGEN.NFO

< *loader* /s >
[2013.09.24 22:20:46 | 000,004,344 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\Helpers\ModelLoader.pyc
[2013.09.24 22:20:46 | 000,001,865 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\input\ProfileLoader\DummyDeviceLoader.pyc
[2013.09.24 22:20:46 | 000,001,229 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\input\ProfileLoader\GamepadLoader.pyc
[2013.09.24 22:20:46 | 000,004,184 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\input\ProfileLoader\JoystickLoader.pyc
[2013.09.24 22:20:46 | 000,008,337 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\input\ProfileLoader\KeyMapingLoader.pyc
[2013.09.24 22:20:46 | 000,002,518 | ---- | M] () -- \Games\World_of_Warplanes\res\scripts\client\input\ProfileLoader\MouseLoader.pyc
[2013.04.21 20:44:16 | 000,008,827 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit.resources\inspector\HeapSnapshotLoader.js
[2013.09.15 14:34:08 | 000,059,720 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
[2013.09.15 14:34:08 | 001,108,296 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader_main.dll
[2013.09.14 01:50:46 | 000,008,827 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Internet Services\WebKit.resources\inspector\HeapSnapshotLoader.js
[2013.08.27 18:19:48 | 001,028,664 | ---- | M] () -- \Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSVideoDownloader.dll
[2010.03.18 23:21:56 | 000,063,312 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.dll
[2010.03.18 00:17:14 | 000,004,096 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.tlb
[2013.08.27 15:33:50 | 000,042,664 | ---- | M] () -- \Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSVideoDownloader.dll
[2011.03.31 01:29:12 | 000,058,880 | ---- | M] () -- \Program Files (x86)\EA Games\Alice Madness Returns\Game\Alice2\Binaries\Win32\PhysXLocal\PhysXLoader.dll
[2013.02.28 01:33:54 | 000,006,852 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\program\pythonloader.py
[2013.02.28 01:23:14 | 000,033,968 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\program\pythonloader.uno.dll
[2013.02.28 01:36:56 | 000,000,171 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\program\pythonloader.uno.ini
[2013.02.27 08:10:40 | 000,013,850 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\program\python-core-3.3.0\lib\unittest\loader.py
[2013.02.27 08:10:40 | 000,049,593 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\program\python-core-3.3.0\lib\unittest\test\test_loader.py
[2013.02.27 15:54:00 | 000,124,234 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\share\extensions\report-builder\libloader-1.1.6.jar
[2013.02.28 01:23:10 | 000,078,512 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\URE\bin\javaloader.uno.dll
[2013.02.27 09:32:22 | 000,004,314 | ---- | M] () -- \Program Files (x86)\LibreOffice 4.0\URE\java\unoloader.jar
[2012.05.03 17:38:36 | 000,071,528 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.05.03 17:39:16 | 000,063,848 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2012.05.21 03:03:06 | 000,083,816 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2012.05.21 03:03:06 | 000,089,448 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2013.03.25 16:29:10 | 000,253,691 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Audiosurf\engine\Preloader.cgr
[2013.03.25 16:29:31 | 000,000,878 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Audiosurf\engine\Preloader_config.xml
[2013.03.25 16:29:34 | 000,097,889 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Audiosurf\engine\start - project loader.cgr
[2013.03.25 16:28:21 | 000,016,384 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Audiosurf\engine\channels\FileLoader.dll
[2013.03.06 21:38:05 | 000,058,880 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\PhysXLoader.dll
[2013.11.27 00:57:18 | 000,001,444 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\DEU\GD_Allium_LootMidgetLoaderBUL.DEU
[2013.11.27 00:57:26 | 000,000,764 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\DEU\GD_Allium_LootMidget_LoaderJET.DEU
[2013.11.27 00:57:18 | 000,000,710 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\DEU\GD_HolidayLoader.DEU
[2013.11.27 00:57:38 | 000,001,396 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ESN\GD_Allium_LootMidgetLoaderBUL.ESN
[2013.11.27 00:57:29 | 000,000,788 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ESN\GD_Allium_LootMidget_LoaderJET.ESN
[2013.11.27 00:57:18 | 000,000,734 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ESN\GD_HolidayLoader.ESN
[2013.11.27 00:57:18 | 000,001,414 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\FRA\GD_Allium_LootMidgetLoaderBUL.FRA

[2013.11.27 00:57:18 | 000,000,738 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\FRA\GD_Allium_LootMidget_LoaderJET.FRA
[2013.11.27 00:57:28 | 000,000,684 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\FRA\GD_HolidayLoader.FRA
[2013.11.27 00:57:29 | 000,001,440 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ITA\GD_Allium_LootMidgetLoaderBUL.ITA
[2013.11.27 00:57:18 | 000,000,784 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ITA\GD_Allium_LootMidget_LoaderJET.ITA
[2013.11.27 00:57:19 | 000,000,730 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\ITA\GD_HolidayLoader.ITA
[2013.11.27 00:57:20 | 000,001,270 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\JPN\GD_Allium_LootMidgetLoaderBUL.JPN
[2013.11.27 00:57:18 | 000,000,722 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\JPN\GD_Allium_LootMidget_LoaderJET.JPN
[2013.11.27 00:57:29 | 000,000,668 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Allium\Compat\Localization\JPN\GD_HolidayLoader.JPN
[2013.03.06 21:38:04 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderBadass.DEU
[2013.03.06 21:38:39 | 000,000,916 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderBUL.DEU
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderEXP.DEU
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderGUN.DEU
[2013.03.06 21:38:38 | 000,000,916 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderHOT.DEU
[2013.03.06 21:38:33 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderJET.DEU
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderPWR.DEU
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_LoaderRPG.DEU
[2013.03.06 21:40:05 | 000,002,656 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\DEU\GD_Iris_Population_Loader.DEU
[2013.03.06 21:38:04 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderBadass.ESN
[2013.03.06 21:38:10 | 000,000,852 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderBUL.ESN
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderEXP.ESN
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderGUN.ESN
[2013.03.06 21:38:34 | 000,000,852 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderHOT.ESN
[2013.03.06 21:38:33 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderJET.ESN
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderPWR.ESN
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_LoaderRPG.ESN
[2013.03.06 21:40:06 | 000,002,868 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ESN\GD_Iris_Population_Loader.ESN
[2013.03.06 21:38:04 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderBadass.FRA
[2013.03.06 21:40:07 | 000,000,876 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderBUL.FRA
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderEXP.FRA
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderGUN.FRA
[2013.03.06 21:38:10 | 000,000,876 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderHOT.FRA
[2013.03.06 21:38:33 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderJET.FRA
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderPWR.FRA
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_LoaderRPG.FRA
[2013.03.06 21:41:55 | 000,002,706 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\FRA\GD_Iris_Population_Loader.FRA
[2013.03.06 21:38:04 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderBadass.ITA
[2013.03.06 21:38:42 | 000,000,856 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderBUL.ITA
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderEXP.ITA
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderGUN.ITA
[2013.03.06 21:38:11 | 000,000,856 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderHOT.ITA
[2013.03.06 21:38:33 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderJET.ITA
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderPWR.ITA
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_LoaderRPG.ITA
[2013.03.06 21:38:41 | 000,002,754 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\ITA\GD_Iris_Population_Loader.ITA
[2013.03.06 21:38:04 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderBadass.JPN
[2013.03.06 21:38:08 | 000,000,748 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderBUL.JPN
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderEXP.JPN
[2013.03.06 21:38:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderGUN.JPN
[2013.03.06 21:38:08 | 000,000,748 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderHOT.JPN
[2013.03.06 21:38:33 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderJET.JPN
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderPWR.JPN
[2013.03.06 21:40:05 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_LoaderRPG.JPN
[2013.03.06 21:38:43 | 000,002,636 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\JPN\GD_Iris_Population_Loader.JPN
[2013.08.30 12:27:01 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderBadass.KOR
[2013.08.30 12:27:24 | 000,000,728 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderBUL.KOR
[2013.08.30 12:27:01 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderEXP.KOR
[2013.08.30 12:27:01 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderGUN.KOR
[2013.08.30 12:27:39 | 000,000,728 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderHOT.KOR
[2013.08.30 12:27:01 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderJET.KOR
[2013.08.30 12:27:01 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderPWR.KOR
[2013.08.30 12:27:01 | 000,000,222 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_LoaderRPG.KOR
[2013.08.30 12:27:02 | 000,002,636 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Iris\Compat\Localization\KOR\GD_Iris_Population_Loader.KOR
[2013.08.30 12:27:36 | 000,001,144 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\DEU\GD_BigLoaderTurret_Digi.DEU
[2013.08.30 12:27:20 | 000,000,570 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\DEU\GD_LoaderUltimateBadass_Digi.DEU
[2013.08.30 12:27:47 | 000,001,102 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\ESN\GD_BigLoaderTurret_Digi.ESN
[2013.08.30 12:27:38 | 000,000,572 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\ESN\GD_LoaderUltimateBadass_Digi.ESN
[2013.08.30 12:27:27 | 000,001,128 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\FRA\GD_BigLoaderTurret_Digi.FRA
[2013.08.30 12:27:46 | 000,000,574 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\FRA\GD_LoaderUltimateBadass_Digi.FRA
[2013.08.30 12:27:27 | 000,001,108 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\ITA\GD_BigLoaderTurret_Digi.ITA
[2013.08.30 12:27:20 | 000,000,570 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\ITA\GD_LoaderUltimateBadass_Digi.ITA
[2013.08.30 12:27:55 | 000,000,990 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\JPN\GD_BigLoaderTurret_Digi.JPN
[2013.08.30 12:27:20 | 000,000,570 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Lobelia\Compat\Localization\JPN\GD_LoaderUltimateBadass_Digi.JPN
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderBadass.DEU
[2013.03.06 21:38:19 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderBoss.DEU
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderBUL.DEU
[2013.03.06 21:38:32 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderEXP.DEU
[2013.03.06 21:38:19 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderGUN.DEU
[2013.03.06 21:40:48 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderHOT.DEU
[2013.03.06 21:40:41 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderION.DEU
[2013.03.06 21:39:03 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderJunk.DEU
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderPirate.DEU
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderPWR.DEU
[2013.03.06 21:39:03 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderRPG.DEU
[2013.03.06 21:38:56 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_LoaderWAR.DEU
[2013.03.06 21:40:42 | 000,004,418 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_Pop_Loader.DEU
[2013.03.06 21:39:04 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\DEU\GD_Orchid_Pop_LoaderBoss.DEU
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderBadass.ESN
[2013.03.06 21:38:19 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderBoss.ESN
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderBUL.ESN
[2013.03.06 21:38:32 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderEXP.ESN
[2013.03.06 21:38:19 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderGUN.ESN
[2013.03.06 21:40:48 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderHOT.ESN
[2013.03.06 21:40:41 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderION.ESN
[2013.03.06 21:39:03 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderJunk.ESN
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderPirate.ESN
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderPWR.ESN
[2013.03.06 21:39:03 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderRPG.ESN
[2013.03.06 21:38:56 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_LoaderWAR.ESN
[2013.03.06 21:40:50 | 000,004,550 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_Pop_Loader.ESN
[2013.03.06 21:39:04 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ESN\GD_Orchid_Pop_LoaderBoss.ESN
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderBadass.FRA
[2013.03.06 21:38:19 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderBoss.FRA
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderBUL.FRA
[2013.03.06 21:38:32 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderEXP.FRA
[2013.03.06 21:38:19 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderGUN.FRA
[2013.03.06 21:40:48 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderHOT.FRA
[2013.03.06 21:40:41 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderION.FRA
[2013.03.06 21:39:03 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderJunk.FRA
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderPirate.FRA
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderPWR.FRA
[2013.03.06 21:39:03 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderRPG.FRA
[2013.03.06 21:38:56 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_LoaderWAR.FRA
[2013.03.06 21:39:06 | 000,004,486 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_Pop_Loader.FRA
[2013.03.06 21:39:04 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\FRA\GD_Orchid_Pop_LoaderBoss.FRA
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderBadass.ITA
[2013.03.06 21:38:19 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderBoss.ITA
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderBUL.ITA
[2013.03.06 21:38:32 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderEXP.ITA
[2013.03.06 21:38:19 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderGUN.ITA
[2013.03.06 21:40:48 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderHOT.ITA
[2013.03.06 21:40:41 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderION.ITA
[2013.03.06 21:39:03 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderJunk.ITA
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderPirate.ITA
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderPWR.ITA
[2013.03.06 21:39:03 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderRPG.ITA
[2013.03.06 21:38:56 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_LoaderWAR.ITA
[2013.03.06 21:40:52 | 000,004,558 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_Pop_Loader.ITA
[2013.03.06 21:39:04 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\ITA\GD_Orchid_Pop_LoaderBoss.ITA
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderBadass.JPN
[2013.03.06 21:38:19 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderBoss.JPN
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderBUL.JPN
[2013.03.06 21:38:32 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderEXP.JPN
[2013.03.06 21:38:19 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderGUN.JPN
[2013.03.06 21:40:48 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderHOT.JPN
[2013.03.06 21:40:41 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderION.JPN
[2013.03.06 21:39:03 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderJunk.JPN
[2013.03.06 21:38:19 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderPirate.JPN
[2013.03.06 21:38:51 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderPWR.JPN
[2013.03.06 21:39:03 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderRPG.JPN
[2013.03.06 21:38:56 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_LoaderWAR.JPN
[2013.03.06 21:40:42 | 000,004,418 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_Pop_Loader.JPN
[2013.03.06 21:39:04 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\JPN\GD_Orchid_Pop_LoaderBoss.JPN
[2013.08.30 12:27:06 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderBadass.KOR
[2013.08.30 12:27:06 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderBoss.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderBUL.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderEXP.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderGUN.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderHOT.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderION.KOR
[2013.08.30 12:27:06 | 000,000,228 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderJunk.KOR
[2013.08.30 12:27:06 | 000,000,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderPirate.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderPWR.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderRPG.KOR
[2013.08.30 12:27:06 | 000,000,226 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_LoaderWAR.KOR
[2013.08.30 12:27:07 | 000,004,418 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_Pop_Loader.KOR
[2013.08.30 12:27:06 | 000,000,216 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Orchid\Compat\Localization\KOR\GD_Orchid_Pop_LoaderBoss.KOR
[2013.03.06 21:39:30 | 000,000,892 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Sage\Compat\Localization\ESN\GD_Sage_Pop_Loader.ESN
[2013.03.06 21:41:46 | 000,000,874 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Sage\Compat\Localization\FRA\GD_Sage_Pop_Loader.FRA
[2013.03.06 21:41:48 | 000,000,898 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Sage\Compat\Localization\ITA\GD_Sage_Pop_Loader.ITA
[2013.08.30 12:27:27 | 000,000,866 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\DLC\Sage\Compat\Localization\KOR\GD_Sage_Pop_Loader.KOR
[2013.03.06 21:28:52 | 003,465,909 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\CookedPCConsole\Boss_Cliffs_CombatLoader.upk
[2013.03.06 21:30:24 | 000,032,232 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\CookedPCConsole\Loader.upk
[2013.03.06 21:40:20 | 000,001,140 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\DEU\GD_BigLoaderTurret.DEU
[2013.03.06 21:41:55 | 000,000,504 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\DEU\GD_LootMidget_LoaderGUN.DEU
[2013.03.06 21:41:30 | 000,009,492 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\DEU\GD_Population_Loader.DEU
[2013.03.06 21:41:31 | 000,001,072 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ESN\GD_BigLoaderTurret.ESN
[2013.03.06 21:42:33 | 000,000,518 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ESN\GD_LootMidget_LoaderGUN.ESN
[2013.03.06 21:40:24 | 000,009,746 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ESN\GD_Population_Loader.ESN
[2013.03.06 21:42:19 | 000,001,098 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\FRA\GD_BigLoaderTurret.FRA
[2013.03.06 21:41:36 | 000,000,514 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\FRA\GD_LootMidget_LoaderGUN.FRA
[2013.03.06 21:41:36 | 000,009,610 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\FRA\GD_Population_Loader.FRA
[2013.03.06 21:41:48 | 000,001,068 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ITA\GD_BigLoaderTurret.ITA
[2013.03.06 21:41:50 | 000,000,530 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ITA\GD_LootMidget_LoaderGUN.ITA
[2013.03.06 21:42:24 | 000,009,798 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\ITA\GD_Population_Loader.ITA
[2013.03.06 21:42:57 | 000,000,946 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\JPN\GD_BigLoaderTurret.JPN
[2013.03.06 21:42:42 | 000,000,502 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\JPN\GD_LootMidget_LoaderGUN.JPN
[2013.03.06 21:42:26 | 000,009,486 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Borderlands 2\WillowGame\Localization\JPN\GD_Population_Loader.JPN
[2013.11.23 19:49:16 | 000,058,880 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Eve Online\bin\PhysXLoader.dll
[2013.03.02 22:27:11 | 000,000,483 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Football Manager 2013\fm.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2013.04.05 15:19:53 | 000,063,256 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Red Orchestra 2\Binaries\Win32\PhysXLocal\PhysXLoader.dll
[2013.12.20 13:15:28 | 000,001,488 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\The Secret World\Data\Gui\Customized\Flash\Sources\com\Utils\ImageLoader.as
[2013.12.20 13:15:29 | 000,014,130 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\The Secret World\Data\Gui\Customized\Flash\Sources\GUIFramework\SFClipLoader.as
[2013.12.20 13:15:20 | 000,000,681 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\The Secret World\Data\Gui\Customized\Flash\Sources\GUIFramework\SFClipLoaderBase.as
[2013.12.20 13:15:35 | 000,000,540 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\The Secret World\Data\Gui\Default\Flash\Loader.swf
[2013.07.24 11:02:12 | 000,064,352 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Trine 2\PhysXLoader.dll
[2013.07.24 11:02:13 | 000,066,912 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Trine 2\PhysXLoader64.dll
[2013.12.16 16:04:29 | 000,065,344 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Viscera Cleanup Detail Santa's Rampage\Binaries\Win32\PhysXLoader.dll
[2013.04.11 23:25:25 | 000,058,880 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\PhysXLoader.dll
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files (x86)\The KMPlayer\ImLoader.dll
[2013.04.06 23:15:33 | 000,330,040 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2013.04.06 23:15:34 | 000,294,400 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\uplay_r1_loader.dll
[2013.09.22 17:43:58 | 000,006,231 | ---- | M] () -- \Program Files (x86)\World of Warcraft\Interface\AddOns\AtlasLoot_Loader\AtlasLoot_Loader.lua
[2013.09.22 17:43:58 | 000,000,832 | ---- | M] () -- \Program Files (x86)\World of Warcraft\Interface\AddOns\AtlasLoot_Loader\AtlasLoot_Loader.toc
[2013.09.15 09:49:59 | 000,000,381 | ---- | M] () -- \Program Files (x86)\World of Warcraft\Interface\AddOns\Prat-3.0\pullouts\Prat-3.0_Loader\Prat-3.0_Loader.toc
[2013.12.02 18:00:52 | 000,000,117 | ---- | M] () -- \Program Files (x86)\World of Warcraft\WTF\Account\SHAMEEKA\SavedVariables\AtlasLoot_Loader.lua
[2013.03.04 20:57:56 | 000,000,078 | ---- | M] () -- \Program Files (x86)\World of Warcraft\WTF\Account\SHAMEEKA\SavedVariables\AtlasLoot_Loader.lua.bak
[2013.01.23 10:31:10 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013.01.23 10:31:10 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013.01.23 10:31:10 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.01.23 10:31:10 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013.01.23 10:31:10 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013.01.23 10:31:10 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.09.27 14:37:00 | 000,307,720 | ---- | M] () -- \Users\Scarlett\AppData\Local\Adobe\AIH.32f499b80ca545b26ca0ae37826b4edc70ff875f\downloader.bundle
[2013.06.24 08:29:00 | 000,512,384 | ---- | M] () -- \Users\Scarlett\AppData\Local\Adobe\AIH.32f499b80ca545b26ca0ae37826b4edc70ff875f\downloader.dll
[2013.12.19 15:39:32 | 000,003,208 | ---- | M] () -- \Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\skin\ajax-loader.gif
[2013.12.15 13:10:05 | 000,000,122 | ---- | M] () -- \Users\Scarlett\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8EFUB7RE\s#\e-aftonbladet.cdn.videoplaza.tv\com.videoplaza.bootloader.sol
[2013.12.15 20:22:47 | 000,110,642 | ---- | M] () -- \Users\Scarlett\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5T9DT1UA\AdLoader-05424a4ab7d836fbf1bc3b5c2b3458f1.min[1].js
[2013.12.04 16:54:55 | 000,000,723 | ---- | M] () -- \Users\Scarlett\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5T9DT1UA\downloaderror[1].js
[2013.12.15 20:22:47 | 000,001,537 | ---- | M] () -- \Users\Scarlett\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ST7YTS8K\AdLoader[1].htm
[2013.12.04 16:54:55 | 000,001,174 | ---- | M] () -- \Users\Scarlett\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ST7YTS8K\downloader[1].js
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013.06.26 08:23:10 | 000,012,532 | ---- | M] () -- \Windows\System32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2013.06.26 08:23:10 | 000,012,532 | ---- | M] () -- \Windows\SysWOW64\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 06:11:20 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_692597a0abb965cc\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.12.14 00:50:09 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.04.12 09:34:35 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011.04.12 09:34:35 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2011.04.12 09:34:35 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2011.04.12 09:34:35 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2011.04.12 09:34:35 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2013.03.03 11:00:24 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013.03.03 11:00:24 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013.03.03 11:00:24 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013.03.03 11:00:24 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013.03.03 11:00:24 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011.04.12 09:33:23 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2010.11.21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.07.08 05:59:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22379_none_0d06fc1cf35bf496\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 06:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.12.14 00:50:09 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

OTL Extras logfile created on: 29.12.2013 11:53:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Scarlett\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,98 Gb Total Physical Memory | 5,11 Gb Available Physical Memory | 64,02% Memory free
15,97 Gb Paging File | 12,60 Gb Available in Paging File | 78,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1862,92 Gb Total Space | 1201,73 Gb Free Space | 64,51% Space Free | Partition Type: NTFS
Drive E: | 2,60 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: SCARLETT-PC | User Name: Scarlett | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1571891557-798081717-1029897310-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1281EC00-2E70-4BA4-ADAC-8DDDE4CEE894}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{AFAF65F7-E45A-44D7-A3AB-83CF9BFFFFF2}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00E20572-FEB2-41D6-A49A-3431732BCDFB}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe |
"{05E63356-9A8A-41D9-8D18-DECB9EFDF2EA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{08BA4446-79F2-44B2-8A94-46BC9ADBF7F5}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{08F1B592-3F98-4DC8-A364-77DB215F018E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock\builds\release\bioshock.exe |
"{08F1F096-6BFA-41D5-A314-ACCAC340FCCD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 3\tropico3.exe |
"{095D40F1-CBD3-4781-A4DF-D7A37DDD2A26}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{0AB99EE9-0581-4A56-88A2-705EA494B7D5}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe |
"{0B711F00-EF9F-41CE-922E-8CD90DC26514}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{0BA8EA85-0777-47FB-A149-C78EABC5F4BF}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{0D57E0EF-19E8-44CC-8270-CA33A2512928}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\cities xl platinum\citiesxl_platinum.exe |
"{0D5C25B7-10E6-4CC3-9735-D7F60D8BFDDC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fable 3\fablelauncher.exe |
"{0E6F4BE5-11C8-4D8F-9616-55A93EC5EBA1}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{0F839DB7-C266-410C-A0CD-9F452B5ABE73}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{0FC7B304-2BE6-4CA2-B780-92031A5B8F48}" = dir=in | app=c:\program files\tightvnc\tvnserver.exe |
"{1021C4F3-3CC8-4BFD-98B8-FB324DA5B6F2}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe |
"{1071FBFC-9DD2-4722-92EC-C883495A6270}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{10738A36-E996-4DA2-8B3C-FBBA13EC32EB}" = protocol=6 | dir=in | app=c:\program files (x86)\origin\origin.exe |
"{1176E6A4-4748-4529-A345-8116D7237E56}" = protocol=58 | dir=in | app=system |
"{119C23A2-8942-42E4-BFE6-65FB74EA2A40}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |
"{172F8140-0B2B-4213-A4BD-C6359A84349D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\wormsrevolution\wormsrevolution.exe |
"{1823837D-8887-4592-A3B8-E1C468AECC68}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{196C010C-9B4C-4408-BBF7-F3270FBF6F77}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{19A4623C-EC8D-44A7-865A-CB1AB9DF01C2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{1B46B704-BD7F-4E4D-91FF-BFE3FDB69D9C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\wormsrevolution\wormsrevolution.exe |
"{1D27D66B-2EA1-4988-8FB9-E7339EC755B9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas enplczru\falloutnvlauncher.exe |
"{1D99C314-9EDB-4971-AFEE-8F4A5F7F6C18}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eve online\eve.exe |
"{1E6695EA-932E-40FD-9A3F-56D3140CE2CC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\little inferno beta\little inferno.exe |
"{1F9FECBC-1C63-454E-A5DD-C6F05EB3AB59}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pinball fx2\pinball fx2.exe |
"{1FEFA425-84BE-42E7-B7DE-CFB09D057E3B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |
"{2182F97B-E84B-4B1C-A6C5-5AAC6FC7A9E0}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{21EEE068-D6B4-470E-9A5D-BB295BCD1E88}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe |
"{220901C2-9189-4F62-B24F-A246224FF777}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |
"{22624E17-38AC-47BB-A937-8CE3FA05F160}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\darksiders 2\darksiders2.exe |
"{23A7E067-1BE6-49FC-BD7B-959322841329}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{25495A55-A714-42AB-B674-9B8A25F7C17D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\little inferno beta\little inferno.exe |
"{26DF21E3-BC85-4F3B-939A-1C812C11470B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{2708EC4A-1B05-43C6-BC80-B19477C0035F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{28302803-F797-4D7A-9F8C-4957E1BA6683}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{29A011BC-E5FC-4EA3-B181-EB1F87BBC04D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{2AE86273-0FE8-4248-B4F8-E49780C1A18A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\gnomoria\gnomoria.exe |
"{2B91536F-2A4A-41BE-BBCF-6CB81A831C19}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{2BC55B32-DA2E-4185-8483-28BB99223821}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{2D6D2AD0-0FAB-45AE-88EC-65F442C05C0D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{2E0EF6D5-5151-4C83-AD13-833BABB9B5B4}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{2E6F1361-DE4E-4F56-8F59-F8F23EBB9FF4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{2F1958A2-DB81-48D3-9036-DC5C20B025B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{2F232F28-467D-4A86-A185-12C73C23FDDF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 3\tropico3.exe |
"{2F4EE192-0D47-41B8-B11A-DC034406F27E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe |
"{3065E057-3459-4561-B795-EE213BF39966}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\gnomoria\gnomoria.exe |
"{33E97871-D25C-4046-8851-E5BCA6A8C9CB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\r.a.w. realms of ancient war\realms of ancient war - config.exe |
"{34E151FA-85CE-4E83-A175-0E4A36BB65B8}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{37D6B054-2293-4A89-8693-C0BC5C72E65F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{396D4F4C-8BB1-4B39-ABFB-A725D5A336FB}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{3A88D740-6FF6-4CBA-A0BF-A9BCD0782BE6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe |
"{3E84FC2B-F424-48A0-94E1-13070ACD4D36}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\football manager 2013\fm.exe |
"{3FB8BFD6-42AF-46C0-B035-FA791EA46543}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{402BDB8A-7307-45E5-A95E-BDAB24CFCE99}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\windosill\windosill.exe |
"{42EFA17E-28B0-4567-A21B-04828454CA1A}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{430890E8-53CB-468B-8623-BC7CDC59CD5C}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{44243341-8D09-4E00-BFE5-43E4EFAD876E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\red orchestra 2\binaries\win32\rogame.exe |
"{447EC627-6F2D-4501-A583-35DC8F20B9A9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{44FE0DD9-AF16-4445-A135-8EFF2CF4FC78}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{4514EB76-A20B-4AEB-AE11-1A154ABEAE80}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supreme commander 2\bin\supremecommander2.exe |
"{45EFBB44-AB63-43AC-9926-214FECFAE181}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{46989F18-7FB1-4B0A-9493-F227F4F4E314}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{46E11018-A767-465B-A7EB-7389964A2EA6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |
"{48E79374-BA74-4366-8B03-2F30EDF7EF54}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pinball fx2\pinball fx2.exe |
"{491BFF9C-B1C4-4E7C-8A80-92D257A73BB4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\zombie bowl-o-rama\zombie bowl-o-rama.exe |
"{4A89D2FE-4FCF-4C82-BDBD-7E38DA3B55AE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age2hd\launcher.exe |
"{4BAEC6EE-4454-457D-BC25-3F6558DE489E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{4F01E856-88E7-4E26-A745-B7E0309D773F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{512F2217-BFDC-4F1B-94C1-E107A3A068F5}" = protocol=17 | dir=in | app=c:\program files (x86)\origin\origin.exe |
"{525FADE0-4FC7-4CCA-A22E-22677D8764EB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\r.a.w. realms of ancient war\realms of ancient war.exe |
"{536F26C4-E411-43D4-A5AA-4A278630CE5E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{54C16D36-360D-4D99-9162-AA17220E6029}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{55E3B97C-D5C7-4B6C-BE6E-B676BCCD5B31}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{573F0B55-80B3-43B6-A501-2FA2A136A2E8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{5783EF66-6A71-49D5-A4F9-5CFA2C954158}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |
"{58E6FABC-5743-4890-AE1D-B5B3139CFDC7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\windosill\windosill.exe |
"{5930FE5B-6051-48FF-9393-91FBC1FCB94D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{5A2380A8-F19C-47EA-A5E0-E99D15FFDA8C}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{5A6BC14B-F31D-4107-B914-44CBC7219F98}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |
"{5A87C621-B030-4EF9-8610-A9F83187C6F2}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2426\agent.exe |
"{5A933EA2-0128-4E82-ACC5-702D1D373526}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{5C205A6A-D8CC-4EF8-96D4-4F13BCC575D8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{5C2928FF-1C00-42B1-AEA1-780CB1C827D3}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{5D9C904F-F616-4E07-94C1-4DC461EBE18B}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{5EB12FE4-0C8F-410A-99F0-A25BDD79BFE9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{5EE01DE6-CF16-440C-B52C-19B6A2474881}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe |
"{6124E26A-17D1-41DF-8752-45D1A4F94880}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{615CB1CA-C8DB-49FF-971B-14DC702B086A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\jack_lumber\jacklumber.exe |
"{61AD3CB7-9A19-4A67-920F-48D1C41978D9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{6554070E-51C8-43BD-BE94-25252F1D5AA2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock\builds\release\bioshock.exe |
"{6590C778-62B9-408A-BC08-0D9E8C1C977D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2426\agent.exe |
"{66AEFB44-455E-4613-A1DD-E2D073AFEC7E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\r.a.w. realms of ancient war\realms of ancient war - config.exe |
"{66B46F8B-521F-4D93-A78C-24DB87CEF030}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\zombie bowl-o-rama\zombie bowl-o-rama.exe |
"{692E99BC-530E-4CE1-9D66-2BE679789709}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\football manager 2013\fm.exe |
"{69A5C17E-BD71-4114-A8B1-CD9203FFA8BF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{6A1DECE9-0EED-4B56-9575-E94C32DA00EF}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6B39EDFC-81D2-4CD8-8A4D-E830DD38E592}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{6B8A3041-2CBA-4574-89E0-DA95DC7964E4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\warzlauncher.exe |
"{6C252C40-CBC4-4B4F-B5A0-3F70B9878C97}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\angry birds space\angrybirdsspace.exe |
"{6D3A9148-CCB1-49DD-9978-1331B67F99BD}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 1942\bf1942.exe |
"{6FB6FB84-854B-40CC-9842-4F43983AA477}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\star wars - the old republic\launcher.exe |
"{6FD9068E-CED8-4663-9F0B-51E3A21B34BC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\war in the north\witn.exe |
"{72CBF195-B9CE-4BDB-9D64-77FC6FF342EB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe |
"{7309403C-0C93-4818-BB1B-1A4656AB6442}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eve online\eve.exe |
"{734E2079-EB4D-4C03-BE29-B48907B2226B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{74A9DD31-008C-4346-8384-304469B80E61}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{77CE7A6C-D245-4510-87E1-845688B63718}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\red orchestra 2\binaries\win32\rogame.exe |
"{7AC88F92-8361-4AA5-8472-71DB1ADAF191}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{7C05A893-BD60-4DED-A087-07AA430142BC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\magicka\magicka.exe |
"{7EFF5938-F09E-48B4-9E80-9983FFAA8036}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the secret world\clientpatcher.exe |
"{7FFF9420-7169-45C0-B328-73A07651F77E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |
"{8000CBE1-4774-464E-90B0-75FA78DC146C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{8379E098-F02D-4501-B626-E8C77752A107}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{84782022-1D4F-4973-A668-2453A1BFA491}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe |
"{85BC1285-EDB6-4925-AFDE-2E73B58C5A0E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{891207CE-21C0-4BD9-A373-C82DA49864D8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{8BD9BCD8-4532-4536-821C-780FF9403DE4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2391\agent.exe |
"{8F4348B9-6060-4509-BBD3-4FCB248E760A}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{8FCD1B45-491E-4E60-8843-41564D24D13A}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{911B83CB-662C-41C5-B494-21B287AE656F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{91822CBB-E5F8-4BCD-B571-B55C4DE17B33}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe |
"{920050FC-A4C9-40B4-A1C6-8E29C08BD21D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{92234010-21A2-4E67-9322-0AC4F948A16E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{923066E7-B1EB-4FD4-9DA2-4BF47A4ABC94}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{9266EF8E-67A6-4283-AD6F-0A2CB79F7F16}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\r.a.w. realms of ancient war\realms of ancient war.exe |
"{94EA051E-F083-411A-AF6D-206EAD0D1536}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9845A00B-28CC-43B0-A7D9-346E457E93D5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{99AFC47B-B958-4824-9A4D-59C74B429A41}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pinball fx2\pinball fx2.exe |
"{99DE5C79-9D92-4CBF-B123-F5F7DA86EF35}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the secret world\clientpatcher.exe |
"{9CA6B8A5-DFB8-4698-A77B-F7E7FA9B5D3C}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{9DF55CDA-DE96-4034-AB39-C61E162436F5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{9E48B1A2-3D83-442F-965D-4E72EE4DECCA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{9EFA74A8-4FD6-4716-9E96-C54C07FA72D5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{9FB44EF1-0022-495D-996E-E17940457650}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2359\agent.exe |
"{A2C94EAE-45C1-465A-BA7A-780B1E59ADAF}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2391\agent.exe |
"{A2D7AEDA-466C-4369-8F9B-79F3D9196E19}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |
"{A3ECFCFA-7DA3-4DD3-B217-A8926F1E7ADE}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 4 beta\bf4.exe |
"{A4567068-0151-435F-B43E-4554066DD7C7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\wargame european escalation\wargame.exe |
"{A67C1F12-CBA3-4DD0-8C69-A0820ECB0F81}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of conan\conanpatcher.exe |
"{A742BA23-FF3E-448D-AD5F-2ED7A31BC26F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\war in the north\witn.exe |
"{A8E8C186-6C06-4AFB-A3ED-606F63CBC14C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{A9C88F60-EAAF-469A-A8E5-CC5A960018CC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\warzlauncher.exe |
"{ACBC639F-E998-432A-ADEA-594E698F1781}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{ADB16C50-34F2-44FE-8873-3DFC78449585}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stronghold crusader extreme\stronghold crusader.exe |
"{AF805657-8687-4533-B009-382117E4AA17}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\cities xl platinum\citiesxl_platinum.exe |
"{B219084F-9106-4ED6-A9DF-6F4F7811632E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{B3BCACBC-1DF7-44CE-90D0-9D5586D55C14}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\viscera cleanup detail santa's rampage\binaries\win32\udk.exe |
"{B430EEA0-FACC-4404-8972-689E0A6D0AC0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{BB0373EF-5C99-4344-9E1C-9E54EB7F6235}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{BE9DEA59-6025-49DB-9020-4F9C1D83984B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{BFE52D3A-2E5B-4313-9B41-B738BC3E3014}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{C226C098-563E-4C64-8035-80C9FD34A83A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\divinity2_dev_cut\autorun.exe |
"{C3511716-A2E9-4610-A44E-2FCF92B80952}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{C4278D42-D9BD-48C6-8297-E7EC7ECDF5DD}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe |
"{C87360EA-EED2-41EA-BBFE-B9936643608D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{C8C647D1-121B-4515-BD11-641075FBB149}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of conan\conanpatcher.exe |
"{CCC9A898-569E-4D51-AC73-9312F0FE13D3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\viscera cleanup detail santa's rampage\binaries\win32\udk.exe |
"{D05EB641-0BE3-4505-9A1B-93A94C5CF3A7}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{D07567FF-5715-4A8A-A867-548BC879F086}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_launcher.exe |
"{D211B1A7-4674-456C-BE76-B7DF8DA0F381}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\star wars - the old republic\launcher.exe |
"{D22EA4B1-402D-4611-BED6-DA0A886BEE43}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\darksiders 2\darksiders2.exe |
"{D27D7EA2-63DC-4609-9545-2F403AEE78CA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supreme commander 2\bin\supremecommander2.exe |
"{D4217010-FBCF-4164-9249-DEDF080C046F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{D4B4326F-CFF8-440E-99E1-A2E80CF8B9C1}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{D50ED996-781B-4F1D-B4BD-066271A881FD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{D93E83F8-0C2C-44E7-943A-4ADDAA81B150}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\divinity2_dev_cut\autorun.exe |
"{DA563701-FDCE-4D09-B26C-4486027AF57F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\jack_lumber\jacklumber.exe |
"{DC75172B-C632-4A0D-AB2B-2E9352305333}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stronghold crusader extreme\stronghold crusader.exe |
"{E053C7D1-466D-45E7-A812-27FE69B3F945}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{E05EEF94-3368-4AE4-AE58-541590F2CDCF}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 4 beta\bf4.exe |
"{E16833A3-CF25-4CE1-B26B-6427BB5BC832}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\pinball fx2\pinball fx2.exe |
"{E391E8DD-CC06-4D1F-8F4E-B6F715B0FB90}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blood bowl legendary edition\bb_le.exe |
"{E5280DF3-99C0-4E63-B491-DFDF5EEC7446}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe |
"{E72B537C-68BD-4D79-A118-E016F942907C}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{E937DFA4-7408-4ECA-A04A-FDDB11920311}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{E9732C99-04B1-495C-B68B-8B2A20DC6EC9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fable 3\fablelauncher.exe |
"{EF25F0C7-5055-4322-A9DF-A8A4588485CF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{EF6BFDC5-AF0F-4671-B467-513CFC8B720F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{F015A511-89F2-4B3D-B52B-EE4AA6D2B67D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blood bowl legendary edition\bb_le.exe |
"{F04A4D53-4422-4246-9694-B6E27E685687}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas enplczru\falloutnvlauncher.exe |
"{F106723F-6CD5-48B0-8C2D-6A81E9762B4F}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe |
"{F1946A9E-E40B-46C8-AC25-EB1493524782}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{F1B90BE9-E07A-4376-9B6C-22A60E4212DB}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2359\agent.exe |
"{F2B3DC11-AA4E-45F2-B886-13531F4C6090}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe |
"{F3C64116-43F4-4441-B5C7-2C91539C492C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age2hd\launcher.exe |
"{F439B3BB-06C5-41F3-85BE-C181FEB2D608}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\path of exile\pathofexilesteam.exe |
"{F7E0B13C-5DD5-4B0D-8B20-D27CDA9468ED}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe |
"{F9024A81-F014-4034-A623-FD17ED73FA16}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 1942\bf1942.exe |
"{F9339E5E-FD14-469A-BAC8-398B40FDFA2E}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{FA807857-051A-4644-BBE8-677A836A655C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe |
"{FAA38243-4CAB-4E7C-9DEF-40D56FCE8E0D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_launcher.exe |
"{FAD41432-1971-4632-AAA3-A0C2559F151F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{FBB692CF-438A-4124-91BF-0659F7619BFC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\angry birds space\angrybirdsspace.exe |
"{FF0AF85E-A41C-46DB-B6D3-E9588DA40315}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\wargame european escalation\wargame.exe |
"TCP Query User{0B911A9D-02CD-49AD-81D7-1AFAB7C43E57}C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"TCP Query User{152099CE-6BE1-4F1E-B3E9-B6B2E7849F63}C:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe |
"TCP Query User{1C6058A1-E261-4631-8B3E-477B2D82CEAE}F:\lada\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=6 | dir=in | app=f:\lada\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"TCP Query User{2512E923-9161-429B-B601-80C56AE0D142}E:\lada projekty\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=6 | dir=in | app=e:\lada projekty\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"TCP Query User{59225E00-4797-4BB1-9C9F-6F1AC8E9BE01}C:\program files (x86)\steam\steamapps\common\fable 3\fable3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fable 3\fable3.exe |
"TCP Query User{63CF1946-DEBE-4ABD-B381-D8F081220BDB}C:\users\scarlett\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\scarlett\appdata\roaming\utorrent\utorrent.exe |
"TCP Query User{71ACF71D-8B6E-4D45-9F6D-4006D613B2F8}F:\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=6 | dir=in | app=f:\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"TCP Query User{76862FF7-846A-49DA-A5FD-0B3D446F845F}C:\games\world_of_warplanes\wowplauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_warplanes\wowplauncher.exe |
"TCP Query User{7BEFFA8C-BC54-4768-AF5C-910B2F1FA784}C:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2.exe |
"TCP Query User{7DE5FFA9-B378-4939-8DD5-A96320A10E15}C:\windows\syswow64\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"TCP Query User{8881FF9B-E1AD-480B-AA4E-D8E8AD3259BA}C:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"TCP Query User{8E4E816C-9B69-4637-807F-BE960FA9BC46}C:\users\scarlett\desktop\prace\aktualni prace\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=6 | dir=in | app=c:\users\scarlett\desktop\prace\aktualni prace\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"TCP Query User{8ED52B27-437A-4CBA-A0CD-ECBAAACC9108}E:\lada\zakazky\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=6 | dir=in | app=e:\lada\zakazky\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"TCP Query User{A5C80B6C-B9CE-4197-8A36-C233A9E5424C}C:\users\scarlett\appdata\roaming\utorrent\updates\3.3.2_30303.exe" = protocol=6 | dir=in | app=c:\users\scarlett\appdata\roaming\utorrent\updates\3.3.2_30303.exe |
"TCP Query User{BE67B897-4129-46A2-ABDF-62AE82AC64DC}C:\program files (x86)\steam\steamapps\common\age of conan\ageofconan.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of conan\ageofconan.exe |
"TCP Query User{DC1CF7B3-142A-461D-BAFE-14A30685313E}C:\program files (x86)\ubisoft\funatics\the settlers ii - 10th anniversary\bin\s2dng.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\funatics\the settlers ii - 10th anniversary\bin\s2dng.exe |
"TCP Query User{DD6ABA8A-7DA0-4CBA-B73D-9219C9C6C02F}C:\program files (x86)\steam\steamapps\common\the war z\infestation.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\infestation.exe |
"TCP Query User{FF895774-EB51-4FF9-9803-75F418C00635}C:\program files (x86)\windows media components\encoder\wmenc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\windows media components\encoder\wmenc.exe |
"TCP Query User{FFC79581-09B3-438B-BBDC-767B08B7DFEB}C:\program files (x86)\ea games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe |
"UDP Query User{0AE5C876-F52A-456A-9608-17D50FB425DE}E:\lada projekty\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=17 | dir=in | app=e:\lada projekty\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"UDP Query User{0BB683C2-5DF1-49B3-AE02-69E44DD32441}C:\games\world_of_warplanes\wowplauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_warplanes\wowplauncher.exe |
"UDP Query User{10A5DE16-14E7-4BBB-85ED-09C7EF11FE0F}C:\program files (x86)\ubisoft\funatics\the settlers ii - 10th anniversary\bin\s2dng.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\funatics\the settlers ii - 10th anniversary\bin\s2dng.exe |
"UDP Query User{15D706A0-E336-4788-843F-90855BE3A192}C:\windows\syswow64\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"UDP Query User{16E4EC19-AA5B-4F9C-A559-DC09B22FECF1}C:\program files (x86)\steam\steamapps\common\the war z\infestation.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\infestation.exe |
"UDP Query User{24D1477B-8B32-4E55-9476-BF60C6DF4367}C:\users\scarlett\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\scarlett\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{30EF0C0E-C1AB-42E6-A71E-0B019FD8FA09}C:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2.exe |
"UDP Query User{410D590B-CE94-498C-94B1-41B34E2AF77D}F:\lada\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=17 | dir=in | app=f:\lada\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"UDP Query User{45AE10C6-5FEB-443A-A987-226177819636}C:\program files (x86)\steam\steamapps\common\fable 3\fable3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fable 3\fable3.exe |
"UDP Query User{5CB8CFC8-14E4-4628-AB4A-7BC9876A497C}F:\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=17 | dir=in | app=f:\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"UDP Query User{5F536FFC-7A4C-4007-BBEF-3003A244EB5B}C:\program files (x86)\windows media components\encoder\wmenc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\windows media components\encoder\wmenc.exe |
"UDP Query User{8B45AC40-AA27-45E6-9524-2CD84639EAA8}C:\users\scarlett\appdata\roaming\utorrent\updates\3.3.2_30303.exe" = protocol=17 | dir=in | app=c:\users\scarlett\appdata\roaming\utorrent\updates\3.3.2_30303.exe |
"UDP Query User{A5C3B198-2880-4BF0-A713-62608FE55656}C:\program files (x86)\ea games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe |
"UDP Query User{D267CD0A-E106-4A10-8B81-6AADF1586E10}C:\users\scarlett\desktop\prace\aktualni prace\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=17 | dir=in | app=c:\users\scarlett\desktop\prace\aktualni prace\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"UDP Query User{D2C05FA0-F3F3-4CCD-9C5E-908828B3012A}C:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"UDP Query User{DE9A3F7C-C6FA-4798-B735-5571C5DF3956}C:\program files (x86)\steam\steamapps\common\age of conan\ageofconan.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of conan\ageofconan.exe |
"UDP Query User{E6877B3E-10AB-40D7-B6E3-A977349C9713}C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"UDP Query User{EE562A18-5E4B-4FFC-9B24-BA2AE0D0D8A9}E:\lada\zakazky\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe" = protocol=17 | dir=in | app=e:\lada\zakazky\cdu 1.1\cdu_azk\cdu_azk\bin\debug\cdu_azk.vshost.exe |
"UDP Query User{F1D5C6BA-2EDD-4978-86AC-15EBA58B25AF}C:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eve online\bin\exefile.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{003B37AE-21F5-5BC5-F5EB-CD60A8928696}" = AMD Accelerated Video Transcoding
"{16C7D2AD-20CA-491E-80BC-8607A9AACED9}" = Microsoft Web Platform Installer 4.6
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{44610EE0-C908-D8F1-425D-914A5B745DEA}" = AMD Drag and Drop Transcoding
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{653B9326-BD45-53BE-681A-A49CAAEE8A3C}" = ccc-utility64
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{94D70749-4281-39AC-AD90-B56A0E0A402E}" = Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}" = AMD Catalyst Install Manager
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{AAFE68DD-A2D5-BDBF-E1B2-CB01DEFD6EB0}" = AMD Media Foundation Decoders
"{AB1F58C0-A7A6-4CF8-960E-3F4D1C12E3B6}" = TightVNC
"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
"{BCA26999-EC22-3007-BB79-638913079C9A}" = Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}" = iTunes
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}" = iCloud
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FCADA26A-5672-31DD-BF0E-BA76ECF9B02D}" = Microsoft Help Viewer 1.0
"AutoHotkey" = AutoHotkey 1.1.10.01
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"UDK-ada9c32a-aeab-4e71-a575-10edc77d2b89" = Viscera Cleanup Detail: Santas Rampage


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}" = LogMeIn Hamachi
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{13464292-6666-B2DB-1B0C-A3FE14DAD1F9}" = CCC Help Dutch
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{18272881-CFC0-434D-A975-E5BE44206AA0}" = Windows Live UX Platform Language Pack
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1" = World of Warplanes
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{23A3E560-069F-4CFC-8F6C-1B526EC735FC}" = Windows Live Writer Resources
"{27B117A8-4B4C-4698-B030-CAA2AE527A9C}_is1" = DTK Video Capture Control 1.0
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{338CD56F-1CDC-CF32-33F6-DED2DF92284E}" = CCC Help French
"{3A9ECD64-DE00-4779-A89E-C878513B2B37}" = Windows Live Writer Resources
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B10.1221.1
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{42B6C7E0-0DAE-488D-8DAF-838898102F19}" = Windows Live Writer
"{45057FCE-5784-48BE-8176-D9D00AF56C3C}" = The Sims™ 3 Po setmění
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0309.1
"{46458556-5C46-79A9-A6FF-81DF1F8B2729}" = CCC Help Hungarian
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{476CD9DE-C45F-4443-BFA7-E51C58B7E455}" = Populous
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.2
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{519D68B8-A768-4CDC-E4C9-B115D49CED93}" = CCC Help Norwegian
"{51D383BC-D988-8C1E-FAA1-BC5260A32A87}" = CCC Help Polish
"{5454085C-129F-416C-9C0B-8B1000058301}" = BioShock 2
"{5454085C-129F-416C-9C0B-8B1000058302}" = BioShock 2
"{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}" = Microsoft Visual C# 2010 Express - ENU
"{5A883D2B-D279-0D01-6E62-B810AFD8CC62}" = Catalyst Control Center InstallProxy
"{5BABDA39-61CF-41EE-992D-4054B6649A9B}" = Movie Maker
"{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}" = Battlefield 1942™
"{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}" = LibreOffice 4.0.1.2
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{61A1A5A8-2835-46CD-9429-A8F4CFEE6657}" = EVE Isk per Hour
"{62C68336-B969-4097-B0BD-A3A0FBFD59C1}" = Mumble 1.2.3
"{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}" = NVIDIA PhysX
"{64BFBE7A-886C-4CA2-A9B4-0C2B5A5942BC}" = Battlefield 3™
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{675F86A8-E093-4002-87D5-915CC2C45571}" = DES 2.0
"{67A4760F-9804-CCF6-C319-27840ED77924}" = CCC Help Korean
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6BE5E4A9-D88B-532D-26E6-883C32BF098A}" = CCC Help Thai
"{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
"{6E0D26C1-4265-1D02-4D19-D0A8F6A463F8}" = Catalyst Control Center
"{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = The Sims™ 3 Luxusní bydlení – Kolekce
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{797DC296-ADC5-4A08-8CBC-AEB0D6F4B249}" = Windows Live Essentials
"{7DD62206-7B6C-E32E-BD11-B49B3B089D16}" = CCC Help Danish
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{86C40513-B5A4-476E-9EAB-EC118DCF4502}" = Windows Live Writer
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{90A40328-973C-4341-A439-713497C14614}_is1" = DTK ANPR SDK 2.0
"{93A3AB24-36E8-41BA-80C6-CCEC237836DC}" = Alice Madness Returns
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9739158D-EDED-D628-9865-1460B5A7FAE3}" = CCC Help Portuguese
"{97C79BEC-43F7-4BD8-A6A7-85C0257E488A}" = Windows Live Writer
"{9809124C-0C4C-2367-7889-1E16D8EF1AAF}" = CCC Help Chinese Standard
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A035950F-15BA-41C0-9D8F-165FC0536012}" = Movie Maker
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}" = Fotogalerie
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A6E1EE9D-01DD-82FD-BDBC-193BCEF9FD5C}" = CCC Help Greek
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB13F192-49FC-A065-F15C-746B10CC43C8}" = CCC Help Japanese
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Czech
"{AE548812-D611-608D-61C6-7E40F28573A2}" = CCC Help Russian
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{BC63AEF9-1367-9F7C-5926-52E56450EDCD}" = CCC Help Spanish
"{C034A6F9-6569-491B-B3BF-F5D15221A708}" = Windows Live Essentials
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C1E2D27F-B363-588E-8859-9EF7F4EBF418}" = CCC Help Chinese Traditional
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{C9CF587D-72F6-4013-9F3F-716E626760BA}" = MySQL Server 6.0
"{CFAB3721-549D-4827-A4E8-7F90192114AB}" = Battlefield 4™ Beta
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D03632B5-1DA9-4536-976D-604719500C45}" = Microsoft Camera Codec Pack
"{D2C146B1-948D-47EF-8387-5D1C6B980F7C}" = Windows Live Writer
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{D4329609-4102-4F8C-B83F-7FE024EEA314}" = Dead Space™ 3
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{D76AC809-CCC1-6198-4970-A63FA5CF7DCB}" = CCC Help Swedish
"{D888F114-7537-4D48-AF03-5DA9C82D7540}" = Photo Common
"{DA675EE2-4C04-9699-0EE2-7EF9FE7AB870}" = CCC Help German
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E06F7C95-4D68-63D9-2231-AA5F8E186FCB}" = CCC Help English
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18F981B-401C-4D90-BC57-D8903564D558}" = Windows Live UX Platform Language Pack
"{E21A8F3C-1ACB-46B1-CE72-E9CF09549DED}" = Catalyst Control Center Localization All
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E2F52AC2-B925-C18F-E1AE-42FBD46ECAC7}" = CCC Help Czech
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E649AC39-69C0-C6FE-0A54-4752DB5D1FD2}" = Catalyst Control Center Graphics Previews Common
"{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
"{E9463114-898C-7C2A-2C47-E9ABC63F5D43}" = CCC Help Finnish
"{EB91007A-0110-42A6-B869-2709955A9B2A}" = Photo Common
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FC6C7107-7D72-41A1-A031-3CE751159BAB}" = Photo Gallery
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"{FF10AC4D-3349-99DA-3E58-5197CEA1D833}" = CCC Help Italian
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FFEC93FF-C162-C0C3-B5E7-01214B0E5F2D}" = CCC Help Turkish
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.0
"Amnesia: A Machine for Pigs_is1" = Amnesia: A Machine for Pigs
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.83
"aTube Catcher" = aTube Catcher
"Audacity_is1" = Audacity 2.0.3
"avast" = avast! Free Antivirus
"Battle.net" = Battle.net
"Battlelog Web Plugins" = Battlelog Web Plugins
"Cool Edit Pro 2.1" = Cool Edit Pro 2.1
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"ESN Sonar-0.70.4" = ESN Sonar
"Euro2A" = Euro2A 5.21
"Fraps" = Fraps
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.12.827
"GOGPACKFALLOUT_is1" = Fallout
"Google Chrome" = Google Chrome
"Hearthstone" = Hearthstone
"hon" = Heroes of Newerth
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0309.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"LogMeIn Hamachi" = LogMeIn Hamachi
"Macro Recorder_is1" = Macro Recorder 5.6.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"Microsoft Visual C# 2010 Express - ENU" = Microsoft Visual C# 2010 Express - ENU
"Mozilla Thunderbird 24.1.0 (x86 cs)" = Mozilla Thunderbird 24.1.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"S2TNG" = The Settlers II - 10th Anniversary
"SpeedFan" = SpeedFan (remove only)
"ssinstall" = Seznam Instalátor
"State of Decay_is1" = State of Decay
"Steam App 105400" = Fable III
"Steam App 105600" = Terraria
"Steam App 1250" = Killing Floor
"Steam App 12900" = Audiosurf
"Steam App 200170" = Worms Revolution
"Steam App 200510" = XCOM: Enemy Unknown
"Steam App 207890" = Football Manager 2013
"Steam App 209730" = RAW - Realms of Ancient War
"Steam App 210550" = Angry Birds Space
"Steam App 215280" = The Secret World
"Steam App 217750" = Age of Conan: Unchained - EU version
"Steam App 219780" = Divinity II: Developer's Cut
"Steam App 220900" = Jack Lumber
"Steam App 221260" = Little Inferno
"Steam App 221380" = Age of Empires II: HD Edition
"Steam App 224500" = Gnomoria
"Steam App 22490" = Fallout: New Vegas
"Steam App 226700" = Infestation: Survivor Stories
"Steam App 226980" = Pinball FX2
"Steam App 231140" = Cities XL Platinum
"Steam App 23490" = Tropico 3 - Steam Special Edition
"Steam App 238960" = Path of Exile
"Steam App 240" = Counter-Strike: Source
"Steam App 265210" = Viscera Cleanup Detail: Santa's Rampage
"Steam App 32160" = Zombie Bowl-O-Rama
"Steam App 32800" = The Lord of the Rings: War in the North
"Steam App 35140" = Batman: Arkham Asylum GOTY Edition
"Steam App 35450" = Red Orchestra 2: Heroes of Stalingrad
"Steam App 35720" = Trine 2
"Steam App 3590" = Plants vs. Zombies: Game of the Year
"Steam App 37600" = Windosill
"Steam App 40100" = Supreme Commander 2
"Steam App 40970" = Stronghold Crusader HD
"Steam App 42910" = Magicka
"Steam App 4500" = S.T.A.L.K.E.R.: Shadow of Chernobyl
"Steam App 47890" = The Sims(TM) 3
"Steam App 49520" = Borderlands 2
"Steam App 50650" = Darksiders II
"Steam App 550" = Left 4 Dead 2
"Steam App 570" = Dota 2
"Steam App 58520" = Blood Bowl: Legendary Edition
"Steam App 58610" = Wargame: European Escalation
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 730" = Counter-Strike: Global Offensive
"Steam App 7670" = BioShock
"Steam App 8500" = EVE Online
"Steam App 8850" = BioShock 2
"Steam App 8870" = BioShock Infinite
"Steam App 8930" = Sid Meier's Civilization V
"TeamViewer 8" = TeamViewer 8
"The KMPlayer" = The KMPlayer (remove only)
"VLC media player" = VLC media player 2.1.0
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite" = Windows Live Essentials
"WinProladder V2.43-11823-CSY_is1" = WinProladder
"WinProladder V3.11-14701-CSY_is1" = WinProladder
"WinProladder V3.11-14701-ENU_is1" = WinProladder
"WinProladder V3.20-15428-ENU-3_is1" = WinProladder
"World of Warcraft" = World of Warcraft

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1571891557-798081717-1029897310-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"101a9f93b8f0bb6f" = Curse Client
"uTorrent" = µTorrent

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 26.12.2013 5:33:35 | Computer Name = Scarlett-PC | Source = WinMgmt | ID = 10
Description =

Error - 27.12.2013 15:01:58 | Computer Name = Scarlett-PC | Source = ssinstall | ID = 0
Description =

Error - 27.12.2013 15:03:18 | Computer Name = Scarlett-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2013 6:02:31 | Computer Name = Scarlett-PC | Source = ssinstall | ID = 0
Description =

Error - 28.12.2013 6:03:56 | Computer Name = Scarlett-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2013 17:00:43 | Computer Name = Scarlett-PC | Source = Application Hang | ID = 1002
Description = Program left4dead2.exe verze 0.0.0.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
8b0 Čas spuštění: 01cf040dee151d15 Čas ukončení: 223 Cesta k aplikaci: C:\Program
Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe ID hlášení:

Error - 28.12.2013 17:06:37 | Computer Name = Scarlett-PC | Source = ssinstall | ID = 0
Description =

Error - 28.12.2013 17:07:50 | Computer Name = Scarlett-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2013 18:43:28 | Computer Name = Scarlett-PC | Source = ssinstall | ID = 0
Description =

Error - 28.12.2013 18:45:03 | Computer Name = Scarlett-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 21.12.2013 13:49:28 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 22.12.2013 6:56:55 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 23.12.2013 6:30:50 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 24.12.2013 5:55:58 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 25.12.2013 4:54:29 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 26.12.2013 5:31:55 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 27.12.2013 15:01:42 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 28.12.2013 6:02:17 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 28.12.2013 17:06:17 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3

Error - 28.12.2013 18:43:20 | Computer Name = Scarlett-PC | Source = Service Control Manager | ID = 7000
Description = Služba BlueStacks Hypervisor neuspěla při spuštění v důsledku následující
chyby: %%3


< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE - HKU\S-1-5-21-1571891557-798081717-1029897310-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O15:64bit: - ..Trusted Domains: localhost ([]http in Internet)
  O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
  O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O33 - MountPoints2\{f32b7ee3-0261-11e3-9043-1c6f65d964fc}\Shell - "" = AutoRun
  [2013.12.29 11:33:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
  [2013.12.28 23:43:35 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2013.12.29 11:18:00 | 000,000,956 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  "uTorrent"=-
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "20131121"=-
  "QuickTime Task"=-
  "iTunesHelper"=-
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Diky za pomoc, a mela jsem tam nejaky viry?

All processes killed
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1571891557-798081717-1029897310-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f32b7ee3-0261-11e3-9043-1c6f65d964fc}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f32b7ee3-0261-11e3-9043-1c6f65d964fc}\ not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\20131121 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP folder moved successfully.
C:\Windows\msdownld.tmp folder moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Scarlett
->Temp folder emptied: 273144287 bytes
->Temporary Internet Files folder emptied: 21137335 bytes
->Google Chrome cache emptied: 357965520 bytes
->Flash cache emptied: 836 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 31518 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 282 bytes

Total Files Cleaned = 622,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Scarlett
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Public

User: Scarlett

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12302013_112851

Files\Folders moved on Reboot...
C:\Users\Scarlett\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Scarlett\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel èistiè

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Spise drobnosti a zbytecnosti, nic vazneho

A pokud nejsou problemy ci dotazy, je to z me strany vse

Diky moc

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat