VIRY.CZ

Dobry Den, mám už asi 2 týdny docela pomalý Pc nevím proč. Dával sem kontrolu Rogue Killer,Microsoft Security Essentials,Malwarebytes Anti-Malware,a sistem explorer ale vždi to nic nenašlo. Třeba když chci spustit neco co je spuštěné jako správce tak trvá asi 4min než se ukáže abych to povolil a spustil vůbec nevím co to je, dokonce mi v prohlížeči podtrhává slova a dělá reklamy , Addblock nefunguje

Zdravim

A budeme vesit z kristalove koule nebo logru od kafe

Kdyz se podivate nahoru, tak je tam takovej veeeeelkej oranzovej obdelnik

Logfile of random's system information tool 1.09 (written by random/random)
Run by Honza at 2014-03-08 17:08:39
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 164 GB (34%) free of 477 GB
Total RAM: 2047 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:09:28, on 8.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE11ENUS/MSE_WCP
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: ESO Survey Live.lnk = C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RzKLService - Razer Inc. - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10091 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
WLIDSvcM.exe 2136
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "894969926-14286434096224084041335297004-66749102120865287981281930778545421190
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1628.0.1027392293\2098513211" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0615 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3489 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_46/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --renderer-print-preview --enable-software-compositing --channel="1628.2.1834461208\874875394" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_46/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --renderer-print-preview --enable-software-compositing --channel="1628.3.1575472408\2064633062" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1628.8.230968496\167184059" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_46/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="1628.10.2104497549\618823761" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-1-Percent/group_46/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="1628.17.943062674\1995307248" /prefetch:673131151
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
C:\Windows\SysWOW64\DllHost.exe /Processid:{B366DEBE-645B-43A5-B865-DDD82C345492}
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\Honza\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-09 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-09 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11 767280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-11-08 1028384]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2013-12-10 1100248]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14 20584608]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2013-11-18 4287536]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-01-21 6087448]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-02-26 3814736]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
ESO Survey Live.lnk - C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-08 17:08:50 ----D---- C:\Program Files\trend micro
2014-03-08 17:08:39 ----D---- C:\rsit
2014-03-08 16:44:33 ----D---- C:\Users\Honza\AppData\Roaming\ESET
2014-03-08 16:38:46 ----D---- C:\ProgramData\ESET
2014-03-08 16:38:46 ----D---- C:\Program Files\ESET
2014-03-08 16:06:34 ----D---- C:\Users\Honza\AppData\Roaming\Malwarebytes
2014-03-08 16:06:18 ----D---- C:\ProgramData\Malwarebytes
2014-03-08 16:06:16 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-08 16:06:16 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-03-06 12:01:20 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-03-02 23:57:32 ----D---- C:\ProgramData\APN
2014-03-02 23:44:01 ----D---- C:\Program Files (x86)\Special Uninstaller
2014-03-02 14:49:42 ----D---- C:\ProgramData\McAfee
2014-03-02 14:49:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-02 14:49:25 ----D---- C:\Windows\system32\Macromed
2014-03-02 14:35:36 ----A---- C:\Windows\SYSWOW64\Access.dat
2014-03-02 14:20:21 ----D---- C:\Users\Honza\AppData\Roaming\Tunngle
2014-03-02 14:20:16 ----A---- C:\Windows\system32\drivers\tap0901t.sys
2014-03-01 12:12:16 ----D---- C:\Users\Honza\AppData\Roaming\com.immersyve.Paladin.live
2014-03-01 10:49:57 ----A---- C:\Windows\system32\perfi011.dat
2014-03-01 10:49:54 ----A---- C:\Windows\system32\perfh011.dat
2014-03-01 10:49:54 ----A---- C:\Windows\system32\perfd011.dat
2014-03-01 10:49:54 ----A---- C:\Windows\system32\perfc011.dat
2014-03-01 10:45:00 ----D---- C:\Windows\ja-JP
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\ja
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\drivers\ja-JP
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\0411
2014-03-01 10:44:00 ----D---- C:\Windows\system32\ja
2014-03-01 10:44:00 ----D---- C:\Windows\system32\0411
2014-03-01 10:43:59 ----D---- C:\Windows\system32\drivers\ja-JP
2014-03-01 10:15:01 ----A---- C:\Windows\system32\lzhfldr2.dll
2014-03-01 10:15:00 ----A---- C:\Windows\SYSWOW64\lzhfldr2.dll
2014-03-01 10:07:20 ----A---- C:\Windows\system32\perfi006.dat
2014-03-01 10:07:17 ----A---- C:\Windows\system32\perfh006.dat
2014-03-01 10:07:17 ----A---- C:\Windows\system32\perfd006.dat
2014-03-01 10:07:17 ----A---- C:\Windows\system32\perfc006.dat
2014-03-01 10:05:49 ----D---- C:\Windows\SYSWOW64\drivers\da-DK
2014-03-01 10:05:41 ----D---- C:\Windows\SYSWOW64\da
2014-03-01 10:05:40 ----D---- C:\Windows\da-DK
2014-03-01 10:05:38 ----D---- C:\Windows\system32\drivers\da-DK
2014-03-01 10:05:27 ----D---- C:\Windows\system32\da
2014-03-01 09:33:16 ----D---- C:\Windows\SYSWOW64\drivers\ro-RO
2014-03-01 09:33:15 ----D---- C:\Windows\ro-RO
2014-03-01 09:33:11 ----D---- C:\Windows\system32\drivers\ro-RO
2014-03-01 09:07:10 ----D---- C:\Windows\SYSWOW64\drivers\hr-HR
2014-03-01 09:07:07 ----D---- C:\Windows\hr-HR
2014-03-01 09:07:06 ----D---- C:\Windows\system32\drivers\hr-HR
2014-03-01 08:40:19 ----A---- C:\Windows\system32\prfi0404.dat
2014-03-01 08:40:17 ----A---- C:\Windows\system32\prfh0404.dat
2014-03-01 08:40:17 ----A---- C:\Windows\system32\prfd0404.dat
2014-03-01 08:40:17 ----A---- C:\Windows\system32\prfc0404.dat
2014-03-01 08:38:47 ----D---- C:\Windows\SYSWOW64\zh-CHT
2014-03-01 08:38:28 ----D---- C:\Windows\SYSWOW64\drivers\zh-TW
2014-03-01 08:38:24 ----D---- C:\Windows\zh-TW
2014-03-01 08:38:23 ----D---- C:\Windows\system32\zh-CHT
2014-03-01 08:37:58 ----D---- C:\Windows\system32\drivers\zh-TW
2014-03-01 08:37:58 ----D---- C:\Windows\system32\drivers\zh-HK
2014-03-01 07:56:32 ----A---- C:\Windows\system32\prfi0416.dat
2014-03-01 07:56:30 ----A---- C:\Windows\system32\prfh0416.dat
2014-03-01 07:56:30 ----A---- C:\Windows\system32\prfd0416.dat
2014-03-01 07:56:30 ----A---- C:\Windows\system32\prfc0416.dat
2014-03-01 07:55:10 ----D---- C:\Windows\pt-BR
2014-03-01 07:55:04 ----D---- C:\Windows\SYSWOW64\drivers\pt-BR
2014-03-01 07:54:54 ----D---- C:\Windows\system32\drivers\pt-BR
2014-03-01 07:23:28 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-01 07:23:28 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-01 07:22:13 ----A---- C:\Windows\system32\prfi0816.dat
2014-03-01 07:22:11 ----A---- C:\Windows\system32\prfh0816.dat
2014-03-01 07:22:11 ----A---- C:\Windows\system32\prfd0816.dat
2014-03-01 07:22:11 ----A---- C:\Windows\system32\prfc0816.dat
2014-03-01 07:20:51 ----D---- C:\Windows\pt-PT
2014-03-01 07:20:46 ----D---- C:\Windows\SYSWOW64\drivers\pt-PT
2014-03-01 07:20:45 ----D---- C:\Windows\SYSWOW64\pt
2014-03-01 07:20:36 ----D---- C:\Windows\system32\drivers\pt-PT
2014-03-01 07:20:34 ----D---- C:\Windows\system32\pt
2014-03-01 06:52:16 ----A---- C:\Windows\system32\perfi015.dat
2014-03-01 06:52:14 ----A---- C:\Windows\system32\perfh015.dat
2014-03-01 06:52:14 ----A---- C:\Windows\system32\perfd015.dat
2014-03-01 06:52:14 ----A---- C:\Windows\system32\perfc015.dat
2014-03-01 06:50:48 ----D---- C:\Windows\SYSWOW64\drivers\pl-PL
2014-03-01 06:50:42 ----D---- C:\Windows\SYSWOW64\pl
2014-03-01 06:50:41 ----D---- C:\Windows\pl-PL
2014-03-01 06:50:40 ----D---- C:\Windows\system32\drivers\pl-PL
2014-03-01 06:50:29 ----D---- C:\Windows\system32\pl
2014-03-01 06:22:55 ----A---- C:\Windows\system32\perfi01F.dat
2014-03-01 06:22:53 ----A---- C:\Windows\system32\perfh01F.dat
2014-03-01 06:22:53 ----A---- C:\Windows\system32\perfd01F.dat
2014-03-01 06:22:53 ----A---- C:\Windows\system32\perfc01F.dat
2014-03-01 06:21:27 ----D---- C:\Windows\tr-TR
2014-03-01 06:21:16 ----D---- C:\Windows\SYSWOW64\tr
2014-03-01 06:21:16 ----D---- C:\Windows\SYSWOW64\drivers\tr-TR
2014-03-01 06:21:06 ----D---- C:\Windows\system32\tr
2014-03-01 06:21:06 ----D---- C:\Windows\system32\drivers\tr-TR
2014-03-01 05:54:39 ----D---- C:\Windows\SYSWOW64\drivers\bg-BG
2014-03-01 05:54:36 ----D---- C:\Windows\system32\drivers\bg-BG
2014-03-01 05:54:36 ----D---- C:\Windows\bg-BG
2014-03-01 05:25:24 ----A---- C:\Windows\system32\prfi0804.dat
2014-03-01 05:25:22 ----A---- C:\Windows\system32\prfh0804.dat
2014-03-01 05:25:22 ----A---- C:\Windows\system32\prfd0804.dat
2014-03-01 05:25:22 ----A---- C:\Windows\system32\prfc0804.dat
2014-03-01 05:23:51 ----D---- C:\Windows\SYSWOW64\zh-CHS
2014-03-01 05:23:51 ----D---- C:\Windows\SYSWOW64\drivers\zh-CN
2014-03-01 05:23:30 ----D---- C:\Windows\system32\zh-CHS
2014-03-01 05:23:28 ----D---- C:\Windows\system32\drivers\zh-CN
2014-03-01 05:22:50 ----D---- C:\Windows\zh-CN
2014-03-01 04:59:14 ----D---- C:\Windows\SYSWOW64\drivers\sr-Latn-CS
2014-03-01 04:59:13 ----D---- C:\Windows\sr-Latn-CS
2014-03-01 04:59:10 ----D---- C:\Windows\system32\drivers\sr-Latn-CS
2014-03-01 04:42:18 ----D---- C:\Windows\SYSWOW64\drivers\et-EE
2014-03-01 04:42:15 ----D---- C:\Windows\system32\drivers\et-EE
2014-03-01 04:42:12 ----D---- C:\Windows\et-EE
2014-03-01 04:26:07 ----D---- C:\Windows\lt-LT
2014-03-01 04:26:05 ----D---- C:\Windows\SYSWOW64\drivers\lt-LT
2014-03-01 04:26:00 ----D---- C:\Windows\system32\drivers\lt-LT
2014-03-01 04:10:32 ----A---- C:\Windows\system32\perfi019.dat
2014-03-01 04:10:30 ----A---- C:\Windows\system32\perfh019.dat
2014-03-01 04:10:30 ----A---- C:\Windows\system32\perfd019.dat
2014-03-01 04:10:30 ----A---- C:\Windows\system32\perfc019.dat
2014-03-01 04:09:20 ----D---- C:\Windows\SYSWOW64\ru
2014-03-01 04:09:20 ----D---- C:\Windows\SYSWOW64\drivers\ru-RU
2014-03-01 04:08:55 ----D---- C:\Windows\system32\drivers\ru-RU
2014-03-01 04:08:48 ----D---- C:\Windows\system32\ru
2014-03-01 04:08:16 ----D---- C:\Windows\ru-RU
2014-03-01 03:48:08 ----A---- C:\Windows\system32\perfi014.dat
2014-03-01 03:48:05 ----A---- C:\Windows\system32\perfh014.dat
2014-03-01 03:48:05 ----A---- C:\Windows\system32\perfd014.dat
2014-03-01 03:48:05 ----A---- C:\Windows\system32\perfc014.dat
2014-03-01 03:46:55 ----D---- C:\Windows\SYSWOW64\no
2014-03-01 03:46:55 ----D---- C:\Windows\SYSWOW64\drivers\nb-NO
2014-03-01 03:46:31 ----D---- C:\Windows\nb-NO
2014-03-01 03:46:27 ----D---- C:\Windows\system32\no
2014-03-01 03:46:24 ----D---- C:\Windows\system32\drivers\nb-NO
2014-03-01 03:27:34 ----A---- C:\Windows\system32\perfi008.dat
2014-03-01 03:27:32 ----A---- C:\Windows\system32\perfh008.dat
2014-03-01 03:27:32 ----A---- C:\Windows\system32\perfd008.dat
2014-03-01 03:27:32 ----A---- C:\Windows\system32\perfc008.dat
2014-03-01 03:26:32 ----D---- C:\Windows\el-GR
2014-03-01 03:25:58 ----D---- C:\Windows\SYSWOW64\el
2014-03-01 03:25:58 ----D---- C:\Windows\SYSWOW64\drivers\el-GR
2014-03-01 03:25:16 ----D---- C:\Windows\system32\el
2014-03-01 03:25:14 ----D---- C:\Windows\system32\drivers\el-GR
2014-03-01 03:05:00 ----A---- C:\Windows\system32\perfi01D.dat
2014-03-01 03:04:57 ----A---- C:\Windows\system32\perfh01D.dat
2014-03-01 03:04:57 ----A---- C:\Windows\system32\perfd01D.dat
2014-03-01 03:04:57 ----A---- C:\Windows\system32\perfc01D.dat
2014-03-01 03:03:59 ----D---- C:\Windows\SYSWOW64\sv
2014-03-01 03:03:59 ----D---- C:\Windows\SYSWOW64\drivers\sv-SE
2014-03-01 03:03:35 ----D---- C:\Windows\system32\sv
2014-03-01 03:03:34 ----D---- C:\Windows\system32\drivers\sv-SE
2014-03-01 03:02:55 ----D---- C:\Windows\sv-SE
2014-03-01 02:44:35 ----A---- C:\Windows\system32\perfi012.dat
2014-03-01 02:44:33 ----A---- C:\Windows\system32\perfh012.dat
2014-03-01 02:44:33 ----A---- C:\Windows\system32\perfd012.dat
2014-03-01 02:44:32 ----A---- C:\Windows\system32\perfc012.dat
2014-03-01 02:43:34 ----D---- C:\Windows\SYSWOW64\drivers\ko-KR
2014-03-01 02:43:19 ----D---- C:\Windows\SYSWOW64\ko
2014-03-01 02:43:16 ----D---- C:\Windows\ko-KR
2014-03-01 02:43:15 ----D---- C:\Windows\system32\drivers\ko-KR
2014-03-01 02:42:51 ----D---- C:\Windows\system32\ko
2014-03-01 02:25:02 ----D---- C:\Windows\SYSWOW64\drivers\th-TH
2014-03-01 02:24:58 ----D---- C:\Windows\system32\drivers\th-TH
2014-03-01 02:24:55 ----D---- C:\Windows\th-TH
2014-03-01 01:56:30 ----A---- C:\Windows\system32\perfi013.dat
2014-03-01 01:56:27 ----A---- C:\Windows\system32\perfh013.dat
2014-03-01 01:56:27 ----A---- C:\Windows\system32\perfd013.dat
2014-03-01 01:56:27 ----A---- C:\Windows\system32\perfc013.dat
2014-03-01 01:55:29 ----D---- C:\Windows\SYSWOW64\nl
2014-03-01 01:55:29 ----D---- C:\Windows\SYSWOW64\0413
2014-03-01 01:55:29 ----D---- C:\Windows\nl-NL
2014-03-01 01:55:08 ----D---- C:\Windows\SYSWOW64\drivers\nl-NL
2014-03-01 01:55:05 ----D---- C:\Windows\system32\nl
2014-03-01 01:55:05 ----D---- C:\Windows\system32\0413
2014-03-01 01:54:38 ----D---- C:\Windows\system32\drivers\nl-NL
2014-03-01 01:39:05 ----D---- C:\Windows\lv-LV
2014-03-01 01:39:02 ----D---- C:\Windows\SYSWOW64\drivers\lv-LV
2014-03-01 01:38:58 ----D---- C:\Windows\system32\drivers\lv-LV
2014-03-01 01:27:44 ----A---- C:\Windows\system32\perfi00B.dat
2014-03-01 01:27:41 ----A---- C:\Windows\system32\perfh00B.dat
2014-03-01 01:27:41 ----A---- C:\Windows\system32\perfd00B.dat
2014-03-01 01:27:41 ----A---- C:\Windows\system32\perfc00B.dat
2014-03-01 01:26:52 ----D---- C:\Windows\fi-FI
2014-03-01 01:26:47 ----D---- C:\Windows\SYSWOW64\drivers\fi-FI
2014-03-01 01:26:46 ----D---- C:\Windows\SYSWOW64\fi
2014-03-01 01:26:37 ----D---- C:\Windows\system32\fi
2014-03-01 01:26:37 ----D---- C:\Windows\system32\drivers\fi-FI
2014-03-01 01:12:36 ----A---- C:\Windows\system32\perfi00E.dat
2014-03-01 01:12:33 ----A---- C:\Windows\system32\perfh00E.dat
2014-03-01 01:12:33 ----A---- C:\Windows\system32\perfd00E.dat
2014-03-01 01:12:33 ----A---- C:\Windows\system32\perfc00E.dat
2014-03-01 01:11:32 ----D---- C:\Windows\SYSWOW64\hu
2014-03-01 01:11:32 ----D---- C:\Windows\SYSWOW64\drivers\hu-HU
2014-03-01 01:11:13 ----D---- C:\Windows\system32\hu
2014-03-01 01:11:12 ----D---- C:\Windows\system32\drivers\hu-HU
2014-03-01 01:10:50 ----D---- C:\Windows\hu-HU
2014-02-28 23:07:23 ----D---- C:\Windows\SYSWOW64\drivers\uk-UA
2014-02-28 23:07:05 ----D---- C:\Windows\uk-UA
2014-02-28 23:07:04 ----D---- C:\Windows\system32\drivers\uk-UA
2014-02-28 22:23:52 ----A---- C:\Windows\system32\perfi00A.dat
2014-02-28 22:23:46 ----A---- C:\Windows\system32\perfh00A.dat
2014-02-28 22:23:46 ----A---- C:\Windows\system32\perfd00A.dat
2014-02-28 22:23:46 ----A---- C:\Windows\system32\perfc00A.dat
2014-02-28 22:19:25 ----D---- C:\Windows\SYSWOW64\es
2014-02-28 22:19:25 ----D---- C:\Windows\SYSWOW64\drivers\es-ES
2014-02-28 22:19:25 ----D---- C:\Windows\SYSWOW64\0C0A
2014-02-28 22:18:22 ----D---- C:\Windows\system32\es
2014-02-28 22:18:22 ----D---- C:\Windows\system32\0C0A
2014-02-28 22:18:18 ----D---- C:\Windows\system32\drivers\es-ES
2014-02-28 22:16:35 ----D---- C:\Windows\es-ES
2014-02-28 21:39:36 ----A---- C:\Windows\system32\perfi00D.dat
2014-02-28 21:39:34 ----A---- C:\Windows\system32\perfh00D.dat
2014-02-28 21:39:34 ----A---- C:\Windows\system32\perfd00D.dat
2014-02-28 21:39:34 ----A---- C:\Windows\system32\perfc00D.dat
2014-02-28 21:38:36 ----D---- C:\Windows\SYSWOW64\he
2014-02-28 21:38:36 ----D---- C:\Windows\SYSWOW64\drivers\he-IL
2014-02-28 21:38:30 ----D---- C:\Windows\system32\he
2014-02-28 21:38:30 ----D---- C:\Windows\system32\drivers\he-IL
2014-02-28 21:38:20 ----D---- C:\Windows\he-IL
2014-02-28 19:45:25 ----D---- C:\Users\Honza\AppData\Roaming\Awesomium
2014-02-28 19:37:54 ----D---- C:\ProgramData\Elder Scrolls Online
2014-02-28 15:48:46 ----D---- C:\Program Files (x86)\ESO Survey Live
2014-02-28 15:46:36 ----D---- C:\Program Files (x86)\Zenimax Online
2014-02-28 00:12:06 ----D---- C:\Windows\Migration
2014-02-27 18:59:12 ----D---- C:\ProgramData\SIX Networks
2014-02-27 18:58:28 ----D---- C:\Users\Honza\AppData\Roaming\SIX Networks
2014-02-23 18:23:43 ----D---- C:\Users\Honza\AppData\Roaming\Project Reality
2014-02-23 14:41:17 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-21 14:40:48 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-02-21 14:40:43 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-02-21 14:40:43 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-02-21 14:40:43 ----A---- C:\Windows\SYSWOW64\java.exe
2014-02-20 01:31:32 ----D---- C:\Program Files (x86)\Managed DirectX (0901)
2014-02-20 00:03:05 ----D---- C:\Program Files\CCleaner
2014-02-18 21:57:28 ----D---- C:\Users\Honza\AppData\Roaming\StealthBastard[Steam]
2014-02-18 21:13:12 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2014-02-18 21:06:23 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-02-18 21:06:22 ----A---- C:\Windows\system32\nvopencl.dll
2014-02-18 21:06:21 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-02-18 21:06:21 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-02-18 21:06:21 ----A---- C:\Windows\system32\nvoglv64.dll
2014-02-18 21:06:21 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-02-18 21:06:20 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-02-18 21:06:20 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-02-18 21:06:20 ----A---- C:\Windows\system32\NvIFR64.dll
2014-02-18 21:06:20 ----A---- C:\Windows\system32\NvFBC64.dll
2014-02-18 21:06:20 ----A---- C:\Windows\system32\nvdispgenco6433489.dll
2014-02-18 21:06:20 ----A---- C:\Windows\system32\nvdispco6433489.dll
2014-02-18 21:06:20 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-02-18 21:06:19 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-02-18 21:06:19 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-02-18 21:06:19 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-02-18 21:06:19 ----A---- C:\Windows\system32\nvcuvid.dll
2014-02-18 21:06:19 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-02-18 21:06:19 ----A---- C:\Windows\system32\nvcuda.dll
2014-02-18 21:06:16 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-02-18 21:06:15 ----A---- C:\Windows\system32\nvcompiler.dll
2014-02-16 14:14:25 ----D---- C:\Users\Honza\AppData\Roaming\LoneSurvivor
2014-02-14 15:55:18 ----D---- C:\ProgramData\Package Cache
2014-02-12 18:10:42 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-12 18:10:42 ----A---- C:\Windows\system32\vbscript.dll
2014-02-12 18:09:59 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-12 18:09:59 ----A---- C:\Windows\system32\msrating.dll
2014-02-12 18:09:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-12 18:09:58 ----A---- C:\Windows\system32\ieui.dll
2014-02-12 18:09:58 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-12 18:09:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-12 18:09:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-12 18:09:57 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-12 18:09:57 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-12 18:09:57 ----A---- C:\Windows\system32\iernonce.dll
2014-02-12 18:09:57 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 18:09:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-12 18:09:56 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-12 18:09:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-12 18:09:56 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-12 18:09:56 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-12 18:09:56 ----A---- C:\Windows\system32\iesetup.dll
2014-02-12 18:09:56 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-12 18:09:56 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-12 18:09:55 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-12 18:09:55 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-12 18:09:55 ----A---- C:\Windows\system32\mshtml.dll
2014-02-12 18:09:55 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-12 18:09:55 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-12 18:09:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-12 18:09:54 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-12 18:09:54 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-12 18:09:54 ----A---- C:\Windows\system32\wininet.dll
2014-02-12 18:09:54 ----A---- C:\Windows\system32\iertutil.dll
2014-02-12 18:09:53 ----A---- C:\Windows\system32\urlmon.dll
2014-02-12 18:09:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-12 18:09:52 ----A---- C:\Windows\system32\ieframe.dll
2014-02-12 18:09:51 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-12 18:09:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-12 18:09:50 ----A---- C:\Windows\system32\jscript9.dll
2014-02-12 13:33:29 ----A---- C:\Windows\system32\msxml3.dll
2014-02-12 13:33:28 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-12 13:33:28 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-12 13:33:28 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-12 13:33:20 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:33:19 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:33:19 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-12 13:33:19 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-12 13:33:19 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:33:19 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-12 13:33:18 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:33:17 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-12 13:33:17 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-12 13:33:16 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-12 13:33:16 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-12 13:33:16 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-12 13:33:16 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-12 13:33:16 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:33:16 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:33:16 ----A---- C:\Windows\system32\secproc.dll
2014-02-12 13:33:16 ----A---- C:\Windows\system32\msdrm.dll
2014-02-12 13:33:15 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-12 13:33:12 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-12 13:33:12 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-12 13:33:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-12 13:33:11 ----A---- C:\Windows\system32\d2d1.dll
2014-02-09 10:22:15 ----D---- C:\Program Files (x86)\Counter-Strike Source

======List of files/folders modified in the last 1 month======

2014-03-08 17:09:22 ----D---- C:\Windows\Temp
2014-03-08 17:09:08 ----D---- C:\Windows\Prefetch
2014-03-08 17:08:50 ----RD---- C:\Program Files
2014-03-08 16:53:04 ----D---- C:\Windows\system32\config
2014-03-08 16:40:12 ----D---- C:\Windows\inf
2014-03-08 16:40:04 ----SHD---- C:\Windows\Installer
2014-03-08 16:39:29 ----D---- C:\Windows\system32\DriverStore
2014-03-08 16:39:29 ----D---- C:\Windows\system32\drivers
2014-03-08 16:39:29 ----D---- C:\Windows\system32\catroot
2014-03-08 16:38:46 ----AHD---- C:\ProgramData
2014-03-08 16:18:14 ----D---- C:\Users\Honza\AppData\Roaming\Skype
2014-03-08 16:16:08 ----D---- C:\ProgramData\NVIDIA
2014-03-08 16:15:54 ----D---- C:\Windows
2014-03-08 16:06:16 ----RD---- C:\Program Files (x86)
2014-03-08 16:03:01 ----D---- C:\Downloads
2014-03-08 15:40:32 ----SD---- C:\System Volume Information
2014-03-08 12:24:39 ----D---- C:\Program Files (x86)\Steam
2014-03-07 17:36:31 ----D---- C:\Windows\rescache
2014-03-06 14:44:34 ----D---- C:\Games
2014-03-06 14:39:25 ----D---- C:\Users\Honza\AppData\Roaming\BitComet
2014-03-03 21:47:16 ----D---- C:\Program Files (x86)\Ubisoft
2014-03-03 21:46:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-03-03 21:44:55 ----D---- C:\Program Files (x86)\Rockstar Games
2014-03-03 18:28:30 ----D---- C:\Windows\Logs
2014-03-03 15:41:54 ----D---- C:\Users\Honza\AppData\Roaming\DAEMON Tools Lite
2014-03-03 15:22:28 ----D---- C:\Windows\SysWOW64
2014-03-03 14:49:30 ----D---- C:\Windows\system32\NDF
2014-03-03 14:30:28 ----D---- C:\Windows\system32\catroot2
2014-03-02 22:59:32 ----D---- C:\Users\Honza\AppData\Roaming\vlc
2014-03-02 18:56:56 ----D---- C:\Program Files (x86)\Counter-Strike Global Offensive
2014-03-02 17:14:52 ----RSD---- C:\Windows\Fonts
2014-03-02 14:49:25 ----D---- C:\Windows\System32
2014-03-02 12:57:55 ----D---- C:\Windows\winsxs
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-03-02 11:57:06 ----D---- C:\Windows\SYSWOW64\el-GR
2014-03-02 11:57:05 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-03-02 11:57:05 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-03-02 11:57:05 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-03-02 11:57:05 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-03-02 11:57:05 ----D---- C:\Windows\SYSWOW64\da-DK
2014-03-02 11:57:04 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-03-02 11:57:04 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-03-02 11:57:04 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-03-02 11:57:04 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-03-02 11:57:04 ----D---- C:\Windows\system32\pt-PT
2014-03-02 11:57:03 ----D---- C:\Windows\system32\ja-JP
2014-03-02 11:57:02 ----D---- C:\Windows\system32\el-GR
2014-03-02 11:57:00 ----D---- C:\Windows\system32\tr-TR
2014-03-02 11:57:00 ----D---- C:\Windows\system32\nl-NL
2014-03-02 11:56:59 ----D---- C:\Windows\system32\pt-BR
2014-03-02 11:56:59 ----D---- C:\Windows\system32\fi-FI
2014-03-02 11:56:58 ----D---- C:\Windows\system32\zh-TW
2014-03-02 11:56:57 ----D---- C:\Windows\system32\nb-NO
2014-03-02 11:56:56 ----D---- C:\Windows\system32\sv-SE
2014-03-02 11:56:56 ----D---- C:\Windows\system32\ru-RU
2014-03-02 11:56:56 ----D---- C:\Windows\system32\pl-PL
2014-03-02 11:56:56 ----D---- C:\Windows\system32\ko-KR
2014-03-02 11:56:56 ----D---- C:\Windows\system32\hu-HU
2014-03-02 11:56:56 ----D---- C:\Windows\system32\da-DK
2014-03-02 11:56:55 ----D---- C:\Windows\system32\zh-CN
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\ro-RO
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\lv-LV
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\lt-LT
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\hr-HR
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-03-02 02:12:14 ----D---- C:\Windows\SYSWOW64\bg-BG
2014-03-02 02:12:13 ----D---- C:\Windows\SYSWOW64\th-TH
2014-03-02 02:12:13 ----D---- C:\Windows\SYSWOW64\et-EE
2014-03-02 02:12:13 ----D---- C:\Windows\system32\sr-Latn-CS
2014-03-02 02:12:13 ----D---- C:\Windows\system32\ro-RO
2014-03-02 02:12:13 ----D---- C:\Windows\system32\lv-LV
2014-03-02 02:12:13 ----D---- C:\Windows\system32\lt-LT
2014-03-02 02:12:13 ----D---- C:\Windows\system32\hr-HR
2014-03-02 02:12:13 ----D---- C:\Windows\system32\fr-FR
2014-03-02 02:12:13 ----D---- C:\Windows\system32\bg-BG
2014-03-02 02:12:12 ----D---- C:\Windows\system32\th-TH
2014-03-02 02:12:12 ----D---- C:\Windows\system32\et-EE
2014-03-02 01:57:51 ----D---- C:\Windows\system32\drivers\fr-FR
2014-03-02 01:54:19 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-03-02 01:54:17 ----D---- C:\Windows\system32\zh-HK
2014-03-02 00:26:52 ----D---- C:\Windows\system32\uk-UA
2014-03-02 00:26:52 ----D---- C:\Windows\system32\he-IL
2014-03-02 00:26:52 ----D---- C:\Windows\system32\es-ES
2014-03-01 23:16:08 ----D---- C:\Program Files (x86)\Electronic Arts
2014-03-01 10:45:04 ----D---- C:\Program Files (x86)\Windows Sidebar
2014-03-01 10:45:04 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-03-01 10:45:04 ----D---- C:\Program Files (x86)\Windows Media Player
2014-03-01 10:45:04 ----D---- C:\Program Files (x86)\Windows Mail
2014-03-01 10:45:04 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-01 10:45:03 ----D---- C:\Program Files\Windows Sidebar
2014-03-01 10:45:03 ----D---- C:\Program Files\Windows Mail
2014-03-01 10:45:03 ----D---- C:\Program Files (x86)\Windows Defender
2014-03-01 10:45:02 ----D---- C:\Program Files\Windows Media Player
2014-03-01 10:45:02 ----D---- C:\Program Files\Internet Explorer
2014-03-01 10:45:02 ----D---- C:\Program Files\DVD Maker
2014-03-01 10:45:01 ----D---- C:\Program Files\Windows Photo Viewer
2014-03-01 10:45:01 ----D---- C:\Program Files\Common Files\System
2014-03-01 10:45:00 ----D---- C:\Windows\servicing
2014-03-01 10:45:00 ----D---- C:\Windows\ehome
2014-03-01 10:45:00 ----D---- C:\Program Files\Windows Journal
2014-03-01 10:45:00 ----D---- C:\Program Files\Windows Defender
2014-03-01 10:44:57 ----D---- C:\Windows\SYSWOW64\winrm
2014-03-01 10:44:57 ----D---- C:\Windows\SYSWOW64\oobe
2014-03-01 10:44:57 ----D---- C:\Windows\SYSWOW64\migwiz
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\XPSViewer
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\WCN
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\sysprep
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\slmgr
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\Setup
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\MUI
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\migration
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\drivers\UMDF
2014-03-01 10:44:33 ----D---- C:\Windows\SYSWOW64\drivers
2014-03-01 10:44:32 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2014-03-01 10:44:32 ----D---- C:\Windows\SYSWOW64\DriverStore
2014-03-01 10:44:32 ----D---- C:\Windows\SYSWOW64\Dism
2014-03-01 10:44:30 ----D---- C:\Windows\SYSWOW64\wbem
2014-03-01 10:44:30 ----D---- C:\Windows\SYSWOW64\com
2014-03-01 10:44:30 ----D---- C:\Windows\IME
2014-03-01 10:44:30 ----D---- C:\Windows\DigitalLocker
2014-03-01 10:44:29 ----D---- C:\Windows\system32\winrm
2014-03-01 10:44:29 ----D---- C:\Windows\system32\oobe
2014-03-01 10:44:29 ----D---- C:\Windows\system32\migwiz
2014-03-01 10:44:29 ----D---- C:\Windows\PolicyDefinitions
2014-03-01 10:44:01 ----D---- C:\Windows\system32\WinBioPlugIns
2014-03-01 10:44:01 ----D---- C:\Windows\system32\sysprep
2014-03-01 10:44:01 ----D---- C:\Windows\system32\slmgr
2014-03-01 10:44:01 ----D---- C:\Windows\system32\Setup
2014-03-01 10:44:01 ----D---- C:\Windows\system32\migration
2014-03-01 10:44:01 ----D---- C:\Windows\system32\Boot
2014-03-01 10:43:59 ----D---- C:\Windows\system32\WCN
2014-03-01 10:43:59 ----D---- C:\Windows\system32\drivers\UMDF
2014-03-01 10:43:58 ----D---- C:\Windows\system32\MUI
2014-03-01 10:43:58 ----D---- C:\Windows\system32\Dism
2014-03-01 10:43:52 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2014-03-01 10:43:44 ----D---- C:\Windows\system32\wbem
2014-03-01 10:43:44 ----D---- C:\Windows\system32\com
2014-03-01 10:43:43 ----D---- C:\Windows\AppPatch
2014-03-01 07:24:50 ----SD---- C:\ProgramData\Microsoft
2014-03-01 02:11:11 ----D---- C:\Windows\fr-FR
2014-03-01 02:11:02 ----D---- C:\Windows\SYSWOW64\drivers\fr-FR
2014-03-01 02:11:01 ----D---- C:\Windows\SYSWOW64\fr
2014-03-01 02:10:49 ----D---- C:\Windows\system32\fr
2014-03-01 01:10:00 ----D---- C:\Windows\Microsoft.NET
2014-03-01 00:50:35 ----D---- C:\Windows\SYSWOW64\he-IL
2014-03-01 00:50:35 ----D---- C:\Windows\SYSWOW64\es-ES
2014-03-01 00:50:03 ----D---- C:\Windows\SYSWOW64\uk-UA
2014-02-28 21:13:33 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-28 21:13:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-27 22:32:02 ----D---- C:\Program Files (x86)\Common Files
2014-02-27 18:58:22 ----RSD---- C:\Windows\assembly
2014-02-27 16:24:40 ----D---- C:\Windows\system32\Tasks
2014-02-27 16:10:46 ----D---- C:\ProgramData\Orbit
2014-02-23 14:41:15 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-02-21 14:40:57 ----D---- C:\ProgramData\Oracle
2014-02-21 14:40:43 ----D---- C:\Program Files (x86)\Java
2014-02-21 01:11:26 ----D---- C:\Windows\system32\wdi
2014-02-20 00:08:45 ----D---- C:\Windows\Panther
2014-02-20 00:08:33 ----D---- C:\Windows\debug
2014-02-19 16:00:08 ----D---- C:\Users\Honza\AppData\Roaming\.minecraft
2014-02-18 21:14:59 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-02-18 01:31:36 ----D---- C:\Windows\system32\MRT
2014-02-18 01:30:16 ----A---- C:\Windows\system32\MRT.exe
2014-02-14 21:27:54 ----D---- C:\Program Files (x86)\Activision
2014-02-14 14:21:28 ----RD---- C:\Program Files (x86)\Skype
2014-02-14 14:21:20 ----D---- C:\ProgramData\Skype
2014-02-13 19:42:17 ----D---- C:\Program Files (x86)\Counter-Strike 1.6
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\sl-SI
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\it-IT
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\de-DE
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-12 20:59:18 ----D---- C:\Windows\SYSWOW64\ar-SA
2014-02-12 20:59:17 ----D---- C:\Windows\system32\sk-SK
2014-02-12 20:59:17 ----D---- C:\Windows\system32\it-IT
2014-02-12 20:59:17 ----D---- C:\Windows\system32\en-US
2014-02-12 20:59:17 ----D---- C:\Windows\system32\de-DE
2014-02-12 20:59:17 ----D---- C:\Windows\system32\cs-CZ
2014-02-12 20:59:16 ----D---- C:\Windows\system32\sl-SI
2014-02-12 20:59:16 ----D---- C:\Windows\system32\ar-SA

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-11-16 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [2010-01-29 115600]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2013-09-17 239296]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
S3 OSFMount;OSFMount; \??\C:\Program Files (x86)\Counter-Strike Global Offensive\image\x64\OSFMount.sys [2013-10-18 552888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 X6va015;X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 []
S3 X6va016;X6va016; \??\C:\Windows\SysWOW64\Drivers\X6va016 []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-01-03 1363616]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-01-03 1748640]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-02-26 2224976]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-02-26 377616]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-02-08 923936]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-02-23 76888]
R2 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2013-11-22 105448]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BEService;BattlEye Service; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2014-02-27 49152]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; C:\Program Files\BitComet\tools\BitCometService.exe [2010-12-28 1296728]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-25 568512]
S3 SystemExplorerHelpService;System Explorer Service; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [2012-11-25 821720]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-19 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna domaci verze

Ano muj kamarad mel dedu v microsoftu a pucil mi cd ze win7

Instalacni DVD muzete mit jake chcete, dulezite je mit sve jedinecne seriove cislo...

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL logfile created on: 8.3.2014 17:22:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Honza\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 34,19% Memory free
4,00 Gb Paging File | 1,86 Gb Available in Paging File | 46,40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 160,33 Gb Free Space | 34,43% Space Free | Partition Type: NTFS

Computer Name: HONZA-PC | User Name: Honza | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2014.03.08 17:19:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Honza\Desktop\OTL.exe
PRC - [2014.03.02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014.02.26 19:57:32 | 003,814,736 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2014.02.23 14:41:15 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2014.02.08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2014.01.03 01:32:12 | 001,363,616 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014.01.03 01:32:04 | 001,748,640 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2013.12.10 03:15:27 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2013.12.10 03:14:56 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2013.11.22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
PRC - [2013.11.08 21:46:18 | 001,028,384 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013.09.12 12:06:22 | 001,337,752 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe


========== Modules (No Company Name) ==========

MOD - [2014.03.02 03:35:25 | 000,394,568 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppgooglenaclpluginchrome.dll
MOD - [2014.03.02 03:35:24 | 013,632,840 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll
MOD - [2014.03.02 03:35:23 | 004,061,000 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll
MOD - [2014.03.02 03:35:20 | 000,716,616 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll
MOD - [2014.03.02 03:35:19 | 000,100,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll
MOD - [2014.03.02 03:35:17 | 001,647,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll
MOD - [2014.03.02 03:35:15 | 000,051,016 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014.02.06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013.12.10 03:14:39 | 015,129,376 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2013.10.23 17:14:22 | 000,348,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2013.10.23 17:14:22 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2013.09.12 12:06:22 | 001,337,752 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010.12.28 09:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014.02.27 19:17:23 | 000,049,152 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2014.02.26 19:57:32 | 002,224,976 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014.02.26 09:50:04 | 000,377,616 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2014.02.25 22:57:46 | 000,568,512 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014.02.23 14:41:15 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014.02.08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014.01.03 01:32:12 | 001,363,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014.01.03 01:32:04 | 001,748,640 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2013.12.10 03:14:56 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2013.11.22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe -- (RzKLService)
SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013.09.05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.11.25 05:13:12 | 000,821,720 | ---- | M] (Mister Group) [On_Demand | Stopped] -- C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe -- (SystemExplorerHelpService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.12.05 09:42:30 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2013.11.16 14:09:55 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013.09.27 09:53:06 | 000,134,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2013.09.17 15:17:38 | 000,239,320 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2013.09.17 15:17:38 | 000,239,296 | ---- | M] (ESET) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\edevmon.sys -- (edevmon)
DRV:64bit: - [2013.09.17 15:17:38 | 000,220,232 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2013.09.17 15:17:38 | 000,168,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2013.09.17 15:17:38 | 000,062,136 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2013.09.17 15:17:38 | 000,044,120 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.06.10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2013.10.18 16:53:14 | 000,552,888 | ---- | M] (PassMark Software) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Counter-Strike Global Offensive\image\x64\OSFMount.sys -- (OSFMount)
DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE11ENUS/MSE_WCP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=U221DHP&pc=U221
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Honza\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Games\Trials Evolution\datapack\orbit\npuplaypc.dll File not found

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2014.03.08 16:38:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014.03.08 16:38:47 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.cz/
CHR - plugin: Error reading preferences file
CHR - Extension: Dokumenty Google = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhledávání Google = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: AdBlock = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.22_0\
CHR - Extension: Skype Click to Call = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.0.14735.1561_0\
CHR - Extension: Privacy Palette = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjkcflkplhgpebknipkekjggglimnone\0.4_0\
CHR - Extension: Peněženka Google = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014.03.08 15:58:35 | 000,000,741 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Stáhnout odkaz s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8:64bit: - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{39807F17-89DB-4615-A4BF-9607D09AFA59}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.iac2 - File not found
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.iv31 - File not found
Drivers32:64bit: vidc.iv32 - File not found
Drivers32:64bit: vidc.iv41 - File not found
Drivers32:64bit: vidc.iv50 - File not found
Drivers32: msacm.iac2 - C:\Windows\SysWOW64\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\Windows\SysWow64\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv32 - C:\Windows\SysWow64\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv41 - C:\Windows\SysWow64\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2014.03.08 17:20:02 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Honza\Desktop\OTL.exe
[2014.03.08 17:08:50 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.03.08 17:08:39 | 000,000,000 | ---D | C] -- C:\rsit
[2014.03.08 16:44:33 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\ESET
[2014.03.08 16:44:33 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\ESET
[2014.03.08 16:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2014.03.08 16:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2014.03.08 16:38:46 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2014.03.08 16:06:34 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Malwarebytes
[2014.03.08 16:06:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014.03.08 16:06:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014.03.08 16:06:16 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014.03.08 16:06:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2014.03.06 12:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2014.03.06 12:01:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2014.03.05 16:58:37 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\LogMeIn Hamachi
[2014.03.03 20:40:16 | 000,000,000 | ---D | C] -- C:\Users\Honza\Documents\Thief
[2014.03.03 20:40:14 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\Game Launcher
[2014.03.03 18:28:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thief
[2014.03.02 23:57:32 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2014.03.02 23:44:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Special Uninstaller
[2014.03.02 23:44:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Special Uninstaller
[2014.03.02 14:49:42 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2014.03.02 14:49:32 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014.03.02 14:49:32 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014.03.02 14:49:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2014.03.02 14:41:14 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\Adobe
[2014.03.02 14:20:21 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Tunngle
[2014.03.02 14:20:16 | 000,031,232 | ---- | C] (Tunngle.net) -- C:\Windows\SysNative\drivers\tap0901t.sys
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2014.03.08 17:32:00 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.03.08 17:28:53 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.03.08 17:19:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Honza\Desktop\OTL.exe
[2014.03.08 17:05:42 | 000,935,175 | ---- | M] () -- C:\Users\Honza\Desktop\RSITx64.exe
[2014.03.08 16:25:47 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.03.08 16:25:47 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.03.08 16:16:25 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.03.08 16:16:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.03.08 16:15:54 | 1609,965,568 | -HS- | M] () -- C:\hiberfil.sys
[2014.03.08 16:06:21 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014.03.06 14:44:35 | 000,001,918 | ---- | M] () -- C:\Users\Honza\Desktop\South Park The Stick of Truth.lnk
[2014.03.06 12:01:21 | 000,000,926 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2014.03.05 20:34:06 | 000,000,222 | ---- | M] () -- C:\Users\Honza\Desktop\7 Days to Die.url
[2014.03.04 16:45:42 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014.03.03 21:47:45 | 000,013,201 | ---- | M] () -- C:\Users\Honza\Desktop\Microsoft Windows Defender.lnk
[2014.03.03 18:28:20 | 000,001,670 | ---- | M] () -- C:\Users\Public\Desktop\Thief.lnk
[2014.03.02 23:44:02 | 000,001,056 | ---- | M] () -- C:\Users\Public\Desktop\Special Uninstaller.lnk
[2014.03.02 23:22:22 | 000,274,680 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.03.02 14:49:32 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014.03.02 14:49:32 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014.03.02 14:35:51 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\Access.dat
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.03.08 17:28:53 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.03.08 17:06:37 | 000,935,175 | ---- | C] () -- C:\Users\Honza\Desktop\RSITx64.exe
[2014.03.08 16:41:42 | 000,696,325 | ---- | C] () -- C:\Users\Honza\Desktop\Bez názvu.png
[2014.03.08 16:06:21 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014.03.06 14:44:35 | 000,001,918 | ---- | C] () -- C:\Users\Honza\Desktop\South Park The Stick of Truth.lnk
[2014.03.05 20:34:05 | 000,000,222 | ---- | C] () -- C:\Users\Honza\Desktop\7 Days to Die.url
[2014.03.05 16:57:24 | 000,000,926 | ---- | C] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2014.03.03 21:47:45 | 000,013,201 | ---- | C] () -- C:\Users\Honza\Desktop\Microsoft Windows Defender.lnk
[2014.03.03 18:28:20 | 000,001,670 | ---- | C] () -- C:\Users\Public\Desktop\Thief.lnk
[2014.03.02 23:44:02 | 000,001,056 | ---- | C] () -- C:\Users\Public\Desktop\Special Uninstaller.lnk
[2014.03.02 14:35:36 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2014.02.23 14:41:17 | 000,281,152 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014.02.14 16:00:42 | 000,000,000 | -HS- | C] () -- C:\Users\Honza\AppData\Local\LumaEmu
[2013.12.08 21:10:38 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll
[2013.12.08 12:53:18 | 000,000,030 | ---- | C] () -- C:\Windows\wininit.ini
[2013.12.03 12:55:15 | 000,000,093 | ---- | C] () -- C:\Users\Honza\AppData\Local\fusioncache.dat
[2013.11.23 16:40:37 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll
[2013.11.19 21:10:59 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013.11.16 13:19:00 | 004,667,190 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.11.21 14:10:20 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014.02.19 16:00:08 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\.minecraft
[2013.12.28 17:38:50 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\.technic
[2013.12.12 22:28:34 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\3909
[2014.01.09 16:12:21 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\assets
[2014.03.02 17:37:06 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Awesomium
[2014.03.06 14:39:25 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\BitComet
[2014.01.28 21:31:53 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Bitdreamers
[2014.03.01 12:12:16 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\com.immersyve.Paladin.live
[2014.03.03 15:41:54 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\DAEMON Tools Lite
[2014.01.22 14:56:54 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Direwolf20_1_6_4
[2014.03.08 16:44:33 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ESET
[2014.01.09 16:09:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ftblauncher
[2014.01.09 16:12:20 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Futurecraft
[2014.01.09 16:10:43 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\libraries
[2014.02.16 14:14:25 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\LoneSurvivor
[2013.12.06 23:04:58 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Origin
[2014.02.23 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Project Reality
[2014.01.03 22:41:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\PunkBuster
[2014.02.27 18:58:28 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\SIX Networks
[2013.11.17 22:36:52 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Spirited Machine
[2014.02.18 22:33:04 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\StealthBastard[Steam]
[2014.03.02 16:40:57 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Tunngle
[2014.01.03 18:50:30 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Ubisoft
[2013.11.26 17:56:05 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Unity
[2014.01.09 16:10:21 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\versions
[2013.12.07 13:19:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\WindowsHelp

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,032,612 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.11.16 13:08:51 | 000,000,946 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.11.16 13:08:54 | 000,000,950 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 06:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 06:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013.09.07 03:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013.07.06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2013.11.26 12:34:34 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=F55B41AA6114568AC558ADBABDA85620 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22525_none_11c3cc3c962abcc3\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[3 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\851ceb46a97e01a7e00eae9b2296907f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\851ceb46a97e01a7e00eae9b2296907f\*.tmp -> ]
[2 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[1996.09.16 03:00:00 | 000,202,240 | ---- | M] (DreamWorks Interactive) -- C:\setup95.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014.02.19 16:00:08 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\.minecraft
[2013.12.28 17:38:50 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\.technic
[2013.12.12 22:28:34 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\3909
[2013.11.24 13:09:56 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Adobe
[2014.01.09 16:12:21 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\assets
[2014.03.02 17:37:06 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Awesomium
[2014.03.06 14:39:25 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\BitComet
[2014.01.28 21:31:53 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Bitdreamers
[2014.03.01 12:12:16 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\com.immersyve.Paladin.live
[2014.03.03 15:41:54 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\DAEMON Tools Lite
[2014.01.22 14:56:54 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Direwolf20_1_6_4
[2014.03.08 16:44:33 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ESET
[2014.01.09 16:09:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ftblauncher
[2014.01.09 16:12:20 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Futurecraft
[2013.11.18 14:30:39 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\GRETECH
[2013.11.16 13:04:54 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Identities
[2014.01.03 14:13:45 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\InstallShield
[2014.01.09 16:10:43 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\libraries
[2014.02.16 14:14:25 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\LoneSurvivor
[2013.11.19 20:53:53 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Macromedia
[2014.03.08 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Malwarebytes
[2009.07.14 16:36:38 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Media Center Programs
[2013.12.07 13:23:08 | 000,000,000 | --SD | M] -- C:\Users\Honza\AppData\Roaming\Microsoft
[2013.12.03 12:55:55 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\NVIDIA
[2013.12.06 23:04:58 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Origin
[2014.02.23 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Project Reality
[2014.01.03 22:41:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\PunkBuster
[2013.11.18 17:02:32 | 000,000,000 | RH-D | M] -- C:\Users\Honza\AppData\Roaming\SecuROM
[2014.02.27 18:58:28 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\SIX Networks
[2014.03.08 16:18:14 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Skype
[2013.11.17 22:36:52 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Spirited Machine
[2014.02.18 22:33:04 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\StealthBastard[Steam]
[2014.03.02 16:40:57 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Tunngle
[2014.01.03 18:50:30 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Ubisoft
[2013.11.26 17:56:05 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Unity
[2014.01.09 16:10:21 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\versions
[2014.03.02 22:59:32 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\vlc
[2013.12.07 13:19:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\WindowsHelp
[2013.11.16 14:11:10 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2013.12.08 18:04:23 | 002,251,879 | ---- | M] () -- C:\Users\Honza\AppData\Roaming\.minecraft\MCPatcher.exe
[2007.03.22 11:46:42 | 000,126,976 | ---- | M] () -- C:\Users\Honza\AppData\Roaming\GRETECH\GomPlayer\GrLauncher.exe
[2011.02.24 16:07:45 | 000,835,440 | R--- | M] () -- C:\Users\Honza\AppData\Roaming\PunkBuster\pbsetup\pbsvc.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2014.03.08 18:32:06 | 000,000,946 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.03.08 22:35:03 | 000,000,950 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[1996.09.16 03:00:00 | 000,202,240 | ---- | M] (DreamWorks Interactive) -- C:\setup95.exe

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.11.14 16:42:42 | 020,584,608 | R--- | M] (Skype Technologies S.A.)
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013.10.28 09:29:38 | 003,675,352 | ---- | M] (Disc Soft Ltd)
"Pando Media Booster" = C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe -- [2013.11.18 13:21:21 | 004,287,536 | ---- | M] ()
"CCleaner Monitoring" = "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR -- [2014.01.21 16:53:16 | 006,087,448 | ---- | M] (Piriform Ltd)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2014.02.06 23:24:01 | 000,808,152 | ---- | M] (Microsoft Corporation) MD5=4263F6C131E513CEA1AE82B5B81A4E1A -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2014.03.02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.) MD5=026C4CA19FAE1F84894A99735B15AACA -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.03.08 17:28:53 | 000,000,512 | ---- | M] () MD5=0FB7EBA481F533912B6530D579E53154 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2 \Downloads\Assassins Creed I Install\*.tmp files -> \Downloads\Assassins Creed I Install\*.tmp -> ]
[2003.12.05 14:52:40 | 000,000,796 | ---- | M] () -- \Games\Grand Theft Auto San Andreas\data\Decision\Craig\crack1.ped
[2013.11.14 17:55:56 | 000,000,100 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\concrete\prodwllecracked.vmt
[2013.11.14 17:55:56 | 000,174,968 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\concrete\prodwllecracked.vtf
[2003.12.05 13:52:40 | 000,000,796 | ---- | M] () -- \Program Files (x86)\GTA San Andreas\data\Decision\Craig\crack1.ped
[2014.01.02 19:06:21 | 000,091,852 | ---- | M] () -- \Program Files (x86)\MTA San Andreas 1.3\mods\deathmatch\resources\addon_speedom\crack1.png
[2013.06.12 14:25:49 | 000,000,090 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\concrete\prodwllecracked.vmt
[2013.06.12 14:25:49 | 000,174,968 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\concrete\prodwllecracked.vtf
[2013.12.02 23:53:24 | 000,000,100 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked (2).vmt
[2013.12.02 23:53:24 | 000,174,968 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked (2).vtf
[2013.12.02 23:53:24 | 000,000,100 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked.vmt
[2013.12.02 23:53:24 | 000,174,968 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked.vtf
[2013.12.03 00:15:57 | 001,361,316 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\DOD Content Addon (Dec2013)\sound\ambient\windcracksandsnaps.wav
[2014.03.05 13:18:35 | 000,041,493 | ---- | M] () -- \Users\Honza\AppData\Roaming\BitComet\torrents\3DMGAME-7.Days.To.Die.Alpha.7.2.Steam.Edition.Cracked-3DM.torrent
[2014.03.05 13:23:14 | 000,006,492 | ---- | M] () -- \Users\Honza\AppData\Roaming\BitComet\torrents\3DMGAME-7.Days.To.Die.Alpha.7.2.Steam.Edition.Cracked-3DM.xml
[2014.01.09 16:03:21 | 000,001,062 | ---- | M] () -- \Users\Honza\AppData\Roaming\ftblauncher\ModPacks\MindCrack\logo_minecrack.png
[2014.01.09 16:03:21 | 000,008,681 | ---- | M] () -- \Users\Honza\AppData\Roaming\ftblauncher\ModPacks\MindCrack\mindcrack_splash.png
[2014.03.07 17:26:14 | 000,001,353 | ---- | M] () -- \Users\Honza\AppData\Roaming\Microsoft\Windows\Recent\3DMGAME-7.Days.To.Die.Alpha.7.2.Steam.Edition.Cracked-3DM.7z.lnk
[2014.03.07 17:26:18 | 000,000,836 | ---- | M] () -- \Users\Honza\AppData\Roaming\Microsoft\Windows\Recent\3DMGAME-7.Days.To.Die.Alpha.7.2.Steam.Edition.Cracked-3DM.lnk
[2014.02.18 22:08:34 | 000,030,461 | ---- | M] () -- \Users\Honza\AppData\Roaming\StealthBastard[Steam]\Levels\Downloaded\Metzelmax.CrackTheCode.lvl

< *keygen* /s >
[1 \ProgramData\Microsoft\Windows\WER\ReportArchive\*.tmp files -> \ProgramData\Microsoft\Windows\WER\ReportArchive\*.tmp -> ]
[1 \Users\All Users\Microsoft\Windows\WER\ReportArchive\*.tmp files -> \Users\All Users\Microsoft\Windows\WER\ReportArchive\*.tmp -> ]
[2010.04.14 23:50:06 | 000,138,752 | ---- | M] () -- \Users\Honza\AppData\Local\SIX Networks\Shared\tools\mingw\bin\ssh-keygen.exe

< *loader* /s >
[2014.01.01 14:16:34 | 000,103,424 | ---- | M] () -- \Downloads\7 Days To Die Version 7.2 SmartSteam Fix Installed (Repaired Version)\SmartSteamLoader.exe
[2010.08.24 10:53:04 | 000,071,008 | ---- | M] () -- \Program Files (x86)\2K Games\Mafia II\pc\PhysXLoader.dll
[2003.09.15 14:02:00 | 000,169,384 | ---- | M] () -- \Program Files (x86)\Counter-Strike 1.6\cstrike\models\qloader.mdl
[2003.09.15 13:55:50 | 000,352,548 | ---- | M] () -- \Program Files (x86)\Counter-Strike 1.6\valve\models\loader.mdl
[2003.09.15 13:56:04 | 000,012,764 | ---- | M] () -- \Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\loader_hydra1.wav
[2003.09.15 13:56:04 | 000,012,164 | ---- | M] () -- \Program Files (x86)\Counter-Strike 1.6\valve\sound\ambience\loader_step1.wav
[2014.03.02 18:56:01 | 000,034,816 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\revLoader.exe
[2013.11.14 17:57:08 | 000,000,258 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01.vmt
[2013.11.14 17:57:08 | 000,699,296 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01.vtf
[2013.11.14 17:57:08 | 000,000,177 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01_glass.vmt
[2013.11.14 17:57:08 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01_glass.vtf
[2013.11.14 17:57:08 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01_glass_ref.vtf
[2013.11.14 17:57:08 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\materials\models\props\de_mill\front_loader01_ref.vtf
[2013.11.14 17:59:04 | 000,149,866 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_front_down.dx90.vtx
[2013.11.14 17:59:04 | 000,001,788 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_front_down.mdl
[2013.11.14 17:59:04 | 000,012,570 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_front_down.phy
[2013.11.14 17:59:04 | 000,563,648 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_front_down.vvd
[2013.11.14 17:59:04 | 000,001,081 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_glass.dx90.vtx
[2013.11.14 17:59:04 | 000,001,784 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_glass.mdl
[2013.11.14 17:59:04 | 000,002,912 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_glass.phy
[2013.11.14 17:59:04 | 000,004,416 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_glass.vvd
[2013.11.14 17:59:04 | 000,133,423 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_rear.dx90.vtx
[2013.11.14 17:59:04 | 000,001,784 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_rear.mdl
[2013.11.14 17:59:04 | 000,011,012 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_rear.phy
[2013.11.14 17:59:04 | 000,534,912 | ---- | M] () -- \Program Files (x86)\Counter-Strike Global Offensive\csgo\models\props\de_mill\front_loader01_rear.vvd
[2013.05.09 17:56:46 | 000,034,304 | ---- | M] () -- \Program Files (x86)\Counter-Strike Source\revLoader.exe
[2010.02.10 02:38:44 | 003,473,163 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_001\loader-00.fbrb
[2010.02.10 02:38:44 | 003,417,011 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_001sr\loader-00.fbrb
[2010.02.10 02:38:44 | 005,299,907 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_002\loader-00.fbrb
[2010.02.10 02:38:46 | 005,283,781 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_002sr\loader-00.fbrb
[2010.02.10 02:38:46 | 006,458,338 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_003\loader-00.fbrb
[2010.02.10 02:38:48 | 005,719,429 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_004\loader-00.fbrb
[2010.02.10 02:38:48 | 005,681,043 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_004sdm\loader-00.fbrb
[2010.02.10 02:38:48 | 005,975,692 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_005\loader-00.fbrb
[2010.02.10 02:38:50 | 005,952,738 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_005sr\loader-00.fbrb
[2010.02.10 02:38:50 | 003,625,529 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_006\loader-00.fbrb
[2010.02.10 02:38:50 | 003,618,790 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_006cq\loader-00.fbrb
[2010.02.10 02:38:50 | 003,609,949 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_006sdm\loader-00.fbrb
[2010.02.10 02:38:52 | 005,127,190 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_007\loader-00.fbrb
[2010.02.10 02:38:52 | 005,117,095 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_007sdm\loader-00.fbrb
[2010.02.10 02:38:52 | 003,702,695 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_008\loader-00.fbrb
[2010.02.10 02:38:52 | 003,568,288 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_009cq\loader-00.fbrb
[2010.02.10 02:38:54 | 003,565,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_009gr\loader-00.fbrb
[2010.02.10 02:38:54 | 003,544,807 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_009sdm\loader-00.fbrb
[2010.02.10 02:38:54 | 006,516,783 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_012gr\loader-00.fbrb
[2010.02.10 02:38:56 | 006,556,315 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_012sr\loader-00.fbrb
[2010.02.10 02:38:44 | 007,748,201 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\mp_common\loader-00.fbrb
[2010.02.10 02:47:40 | 004,575,342 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_003_B\loader-00.fbrb
[2010.02.10 02:47:42 | 005,437,555 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_004_B\loader-00.fbrb
[2010.02.10 02:47:42 | 005,555,302 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_005\loader-00.fbrb
[2010.02.10 02:47:44 | 006,135,296 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_005_B\loader-00.fbrb
[2010.02.10 02:47:44 | 005,228,984 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_006\loader-00.fbrb
[2010.02.10 02:47:44 | 006,938,136 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_007\loader-00.fbrb
[2010.02.10 02:47:46 | 005,814,240 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_008\loader-00.fbrb
[2010.02.10 02:47:46 | 005,800,297 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_008_B\loader-00.fbrb
[2010.02.10 02:47:48 | 006,397,231 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_009\loader-00.fbrb
[2010.02.10 02:47:38 | 002,006,427 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_01\loader-00.fbrb
[2010.02.10 02:47:40 | 004,760,479 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_02\loader-00.fbrb
[2010.02.10 02:47:40 | 006,542,963 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_03\loader-00.fbrb
[2010.02.10 02:47:42 | 005,840,761 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_04\loader-00.fbrb
[2010.02.10 02:47:38 | 001,271,669 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Dist\win32\levels\sp_common\loader-00.fbrb
[2013.12.07 01:29:58 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_harvest_day_cq\loader-00.fbrb
[2013.12.07 01:30:04 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_harvest_day_gr\loader-00.fbrb
[2013.12.07 01:30:09 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_harvest_day_sdm\loader-00.fbrb
[2013.12.07 01:30:16 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_harvest_day_sr\loader-00.fbrb
[2013.12.07 01:30:22 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_oasis_cq\loader-00.fbrb
[2013.12.07 01:30:28 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_oasis_gr\loader-00.fbrb
[2013.12.07 01:30:38 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_oasis_sdm\loader-00.fbrb
[2013.12.07 01:30:42 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\bc1_oasis_sr\loader-00.fbrb
[2013.12.07 01:31:59 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_001\loader-00.fbrb
[2013.12.07 01:32:09 | 007,538,086 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_001sdm\loader-00.fbrb
[2013.12.07 01:32:16 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_001sr\loader-00.fbrb
[2013.12.07 01:32:25 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_002\loader-00.fbrb
[2013.12.07 01:32:29 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_002sr\loader-00.fbrb
[2013.12.07 01:32:36 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_003\loader-00.fbrb
[2013.12.07 01:32:47 | 005,837,142 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_003sr\loader-00.fbrb
[2013.12.07 01:32:51 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_004\loader-00.fbrb
[2013.12.07 01:33:03 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_004sdm\loader-00.fbrb
[2013.12.07 01:33:09 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_005\loader-00.fbrb
[2013.12.07 01:33:34 | 006,014,815 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_005gr\loader-00.fbrb
[2013.12.07 01:33:41 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_005sr\loader-00.fbrb
[2013.12.07 01:33:47 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_006\loader-00.fbrb
[2013.12.07 01:33:55 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_006cq\loader-00.fbrb
[2013.12.07 01:34:03 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_006sdm\loader-00.fbrb
[2013.12.07 01:34:15 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_007\loader-00.fbrb
[2013.12.07 01:34:27 | 006,098,333 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_007gr\loader-00.fbrb
[2013.12.07 01:34:30 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_007sdm\loader-00.fbrb
[2013.12.07 01:34:32 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_008\loader-00.fbrb
[2013.12.07 01:34:45 | 006,029,512 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_008cq\loader-00.fbrb
[2013.12.07 01:34:58 | 006,015,553 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_008sdm\loader-00.fbrb
[2013.12.07 01:35:03 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_009cq\loader-00.fbrb
[2013.12.07 01:35:08 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_009gr\loader-00.fbrb
[2013.12.07 01:35:15 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_009sdm\loader-00.fbrb
[2013.12.07 01:35:21 | 005,878,478 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_009sr\loader-00.fbrb
[2013.12.07 01:35:34 | 006,018,369 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_012cq\loader-00.fbrb
[2013.12.07 01:35:38 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_012gr\loader-00.fbrb
[2013.12.07 01:35:47 | 002,348,343 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_012sr\loader-00.fbrb
[2013.12.07 01:35:51 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_sp_002gr\loader-00.fbrb
[2013.12.07 01:35:56 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_sp_002sdm\loader-00.fbrb
[2013.12.07 01:35:59 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_sp_002sr\loader-00.fbrb
[2013.12.07 01:36:05 | 001,612,131 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_sp_005cq\loader-00.fbrb
[2013.12.07 01:36:23 | 000,000,157 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp_sp_005sdm\loader-00.fbrb
[2013.12.07 01:31:40 | 007,593,208 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\mp2_common\loader-00.fbrb
[2013.12.07 01:38:20 | 063,933,148 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_common\loader-00.fbrb
[2013.12.07 01:38:26 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_002cq\loader-00.fbrb
[2013.12.07 01:38:28 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_002r\loader-00.fbrb
[2013.12.07 01:38:30 | 000,001,204 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_002sdm\loader-00.fbrb
[2013.12.07 01:38:33 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_002sr\loader-00.fbrb
[2013.12.07 01:38:36 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_003cq\loader-00.fbrb
[2013.12.07 01:38:40 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_003r\loader-00.fbrb
[2013.12.07 01:38:41 | 000,001,203 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_003sdm\loader-00.fbrb
[2013.12.07 01:38:43 | 000,001,006 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_003sr\loader-00.fbrb
[2013.12.07 01:38:44 | 000,001,009 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_005cq\loader-00.fbrb
[2013.12.07 01:38:45 | 000,001,009 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_005r\loader-00.fbrb
[2013.12.07 01:38:47 | 000,001,205 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_005sdm\loader-00.fbrb
[2013.12.07 01:38:51 | 000,001,009 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_005sr\loader-00.fbrb
[2013.12.07 01:38:55 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_006cq\loader-00.fbrb
[2013.12.07 01:38:57 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_006r\loader-00.fbrb
[2013.12.07 01:39:00 | 000,001,203 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_006sdm\loader-00.fbrb
[2013.12.07 01:39:03 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_006sr\loader-00.fbrb
[2013.12.07 01:39:05 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_007cq\loader-00.fbrb
[2013.12.07 01:39:09 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_007r\loader-00.fbrb
[2013.12.07 01:39:13 | 000,001,202 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_007sdm\loader-00.fbrb
[2013.12.07 01:39:16 | 000,001,008 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\nam_mp_007sr\loader-00.fbrb
[2013.12.07 01:39:20 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_003_b\loader-00.fbrb
[2013.12.07 01:39:27 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_004_b\loader-00.fbrb
[2013.12.07 01:39:30 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_005\loader-00.fbrb
[2013.12.07 01:39:38 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_005_b\loader-00.fbrb
[2013.12.07 01:39:42 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_006\loader-00.fbrb
[2013.12.07 01:39:54 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_007\loader-00.fbrb
[2013.12.07 01:40:00 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_008\loader-00.fbrb
[2013.12.07 01:40:06 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_008_b\loader-00.fbrb
[2013.12.07 01:40:11 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_009\loader-00.fbrb
[2013.12.07 01:40:14 | 001,131,275 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_01\loader-00.fbrb
[2013.12.07 01:40:18 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_02\loader-00.fbrb
[2013.12.07 01:40:25 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_03\loader-00.fbrb
[2013.12.07 01:40:33 | 001,131,640 | ---- | M] () -- \Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\Package\levels\sp_04\loader-00.fbrb
[2003.04.11 14:45:42 | 000,348,160 | ---- | M] () -- \Program Files (x86)\GameSpy Arcade\Services\_common\PortraitLoader.dll
[2013.11.18 14:04:53 | 000,795,648 | ---- | M] () -- \Program Files (x86)\MTA San Andreas 1.3\MTA\loader.dll
[2013.12.10 03:13:27 | 001,168,672 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\ExtensionLoader.dll
[2013.12.20 01:37:56 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.12.20 01:37:56 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013.12.20 01:37:44 | 000,073,536 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.12.20 01:37:44 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2011.11.23 23:44:10 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderLargeBlue.gif
[2011.11.23 23:44:10 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderLargeGrey.gif
[2011.11.23 23:44:10 | 000,001,737 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderSmallBlue.gif
[2011.11.23 23:44:10 | 000,001,737 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderSmallGold.gif
[2013.10.23 21:07:40 | 000,007,825 | ---- | M] () -- \Program Files (x86)\Steam\remoteui\static\libs\images\ajax-loader.gif
[2013.06.12 14:31:29 | 000,000,234 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01.vmt
[2013.06.12 14:31:30 | 000,699,296 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01.vtf
[2013.06.12 14:31:30 | 000,000,164 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01_glass.vmt
[2013.06.12 14:31:30 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01_glass.vtf
[2013.06.12 14:31:30 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01_glass_ref.vtf
[2013.06.12 14:31:30 | 000,043,936 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\materials\models\props\de_mill\front_loader01_ref.vtf

[2013.06.12 14:35:20 | 000,001,788 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_front_down.mdl
[2013.06.12 14:35:20 | 000,012,570 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_front_down.phy
[2013.06.12 14:35:20 | 000,149,866 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_front_down.vtx
[2013.06.12 14:35:20 | 000,563,648 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_front_down.vvd
[2013.06.12 14:35:20 | 000,001,784 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_glass.mdl
[2013.06.12 14:35:20 | 000,002,912 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_glass.phy
[2013.06.12 14:35:20 | 000,001,081 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_glass.vtx
[2013.06.12 14:35:20 | 000,004,416 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_glass.vvd
[2013.06.12 14:35:20 | 000,001,784 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_rear.mdl
[2013.06.12 14:35:20 | 000,011,012 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_rear.phy
[2013.06.12 14:35:20 | 000,133,423 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_rear.vtx
[2013.06.12 14:35:20 | 000,534,912 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSGO Content Addon\models\props\de_mill\front_loader01_rear.vvd
[2011.02.24 10:11:20 | 000,234,104 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ubiorbitapi_r2_loader.dll
[2014.01.15 20:31:39 | 000,009,728 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed Liberation HD\uplay_r1_loader.dll
[2011.11.23 18:38:29 | 000,228,864 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ubiorbitapi_r2_loader.dll
[2011.10.30 07:10:24 | 000,169,080 | ---- | M] () -- \Program Files (x86)\Ubisoft\Assassin's Creed Revelations\uplay_r1_loader.dll
[2013.11.23 13:43:28 | 000,329,056 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2014.02.06 04:52:54 | 000,751,416 | ---- | M] () -- \Program Files (x86)\Zenimax Online\Launcher\downloader.dll
[2013.10.18 02:34:40 | 001,168,672 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{11CF68BC-1D06-4BEE-B516-DFB2F950971A}\ExtensionLoader.dll
[2013.12.10 03:13:27 | 001,168,672 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{574754CF-4D81-4CB5-AF77-73C62F433AE4}\ExtensionLoader.dll
[2013.08.22 19:01:28 | 000,061,528 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2013.10.09 17:07:12 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013.10.09 17:07:12 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013.10.09 17:07:12 | 000,006,012 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.10.09 17:07:12 | 000,021,956 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_30fps.gif
[2013.10.09 17:07:12 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.09 17:07:12 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013.10.09 17:07:12 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013.10.09 17:07:12 | 000,006,012 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.10.09 17:07:12 | 000,021,956 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_30fps.gif
[2013.10.09 17:07:12 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2014.01.20 21:17:37 | 000,144,966 | ---- | M] () -- \Users\Honza\AppData\Local\Google\Chrome\User Data\Default\pcckcclhlfcfgbhcboegfgmddkcklpbi\1.26.13_0\extensionData\plugins\91_monetizationLoader.js.js
[2014.03.06 12:02:54 | 000,112,122 | ---- | M] () -- \Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0YYYFMGZ\AdLoader-7b473315d0084c71df83cdee72aab144.min[1].js
[5 \Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0YYYFMGZ\*.tmp files -> \Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0YYYFMGZ\*.tmp -> ]
[2014.03.06 12:02:54 | 000,001,870 | ---- | M] () -- \Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TFFDPF2O\AdLoader[1].htm
[2014.01.17 12:17:27 | 000,002,545 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\dark_rounded\loader.gif
[2014.01.17 12:17:27 | 000,002,545 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\dark_square\loader.gif
[2014.01.17 12:17:27 | 000,006,331 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\default\loader.gif
[2014.01.17 12:17:27 | 000,002,545 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\facebook\loader.gif
[2014.01.17 12:17:27 | 000,002,545 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\light_rounded\loader.gif
[2014.01.17 12:17:27 | 000,002,545 | ---- | M] () -- \Users\Honza\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\templates\web\images\prettyPhoto\light_square\loader.gif
[2014.02.27 16:21:36 | 000,012,811 | ---- | M] () -- \Users\Honza\AppData\Local\Overwolf\InstallerCache\preloader_3337.gif
[2013.06.28 14:26:36 | 000,938,343 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\hexxit\ForgeModLoader-client-0.log
[2013.06.28 13:19:14 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\hexxit\ForgeModLoader-client-0.log.lck
[2013.05.25 13:07:58 | 000,234,255 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log
[2013.05.10 15:35:08 | 000,241,911 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log.1
[2013.05.10 15:35:10 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log.1.lck
[2013.05.10 15:57:06 | 020,548,863 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log.2
[2013.05.10 15:35:10 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log.2.lck
[2013.05.25 13:06:16 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-0.log.lck
[2013.05.25 12:52:40 | 054,727,491 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-1.log
[2013.05.24 18:13:30 | 100,754,010 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\majnuj-test-modpack\ForgeModLoader-client-2.log
[2013.12.28 17:57:07 | 000,027,218 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\yogbox\ModLoader.txt
[2013.12.28 17:56:49 | 000,000,832 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\yogbox\config\ModLoader.cfg
[2013.12.28 17:56:41 | 000,000,046 | ---- | M] () -- \Users\Honza\AppData\Roaming\.technic\yogbox\config\mod_ModLoaderMp.cfg
[2014.01.22 16:11:05 | 001,121,157 | ---- | M] () -- \Users\Honza\AppData\Roaming\Direwolf20_1_6_4\minecraft\ForgeModLoader-client-0.log
[2014.01.22 16:04:39 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\Direwolf20_1_6_4\minecraft\ForgeModLoader-client-0.log.lck
[2014.01.22 15:48:35 | 001,098,655 | ---- | M] () -- \Users\Honza\AppData\Roaming\Direwolf20_1_6_4\minecraft\ForgeModLoader-client-1.log
[2014.01.22 15:23:12 | 001,345,436 | ---- | M] () -- \Users\Honza\AppData\Roaming\Direwolf20_1_6_4\minecraft\ForgeModLoader-client-2.log
[2014.01.22 14:56:23 | 000,000,068 | ---- | M] () -- \Users\Honza\AppData\Roaming\Direwolf20_1_6_4\minecraft\config\TConPreloader.cfg
[2014.01.11 01:15:15 | 005,522,779 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\ForgeModLoader-client-0.log
[2014.01.10 21:59:46 | 000,000,000 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\ForgeModLoader-client-0.log.lck
[2014.01.09 17:07:16 | 001,204,691 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\ForgeModLoader-client-1.log
[2014.01.09 16:18:48 | 000,689,651 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\ForgeModLoader-client-2.log
[2014.01.09 16:10:20 | 000,000,068 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\config\TConPreloader.cfg
[2014.01.11 01:15:09 | 000,000,004 | ---- | M] () -- \Users\Honza\AppData\Roaming\Futurecraft\minecraft\saves\FutureCraft\galacticraft\chunkloaders.dat
[2014.02.18 22:32:57 | 000,000,004 | ---- | M] () -- \Users\Honza\AppData\Roaming\StealthBastard[Steam]\downloader.sav
[2014.03.08 12:24:45 | 000,013,248 | ---- | M] () -- \Windows\Prefetch\SMARTSTEAMLOADER.EXE-EE6580C7.pf
[2009.07.14 13:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 15:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2014.03.01 10:05:18 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb.manifest
[2014.03.01 10:05:18 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb_winload.efi.mui_35ee487d
[2014.03.01 10:05:18 | 000,034,368 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb_winload.exe.mui_3bc5b827
[2014.03.01 10:05:18 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb_winresume.efi.mui_f412814e
[2014.03.01 10:05:18 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb_winresume.exe.mui_ff8b5358
[2013.11.21 22:05:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155.manifest
[2013.11.21 22:05:51 | 000,035,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155_winload.efi.mui_35ee487d
[2013.11.21 22:05:51 | 000,035,904 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155_winload.exe.mui_3bc5b827
[2013.11.21 22:05:51 | 000,030,800 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155_winresume.efi.mui_f412814e
[2013.11.21 22:05:51 | 000,030,800 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155_winresume.exe.mui_ff8b5358
[2014.03.01 03:24:43 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3.manifest
[2014.03.01 03:24:43 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winload.efi.mui_35ee487d
[2014.03.01 03:24:43 | 000,036,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winload.exe.mui_3bc5b827
[2014.03.01 03:24:43 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winresume.efi.mui_f412814e
[2014.03.01 03:24:43 | 000,031,312 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3_winresume.exe.mui_ff8b5358
[2013.11.21 22:11:13 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2013.11.21 22:11:13 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2013.11.21 22:11:13 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2013.11.21 22:11:13 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2013.11.21 22:11:13 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2014.02.28 22:13:45 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf.manifest
[2014.02.28 22:13:46 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf_winload.efi.mui_35ee487d
[2014.02.28 22:13:46 | 000,035,408 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf_winload.exe.mui_3bc5b827
[2014.02.28 22:13:46 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf_winresume.efi.mui_f412814e
[2014.02.28 22:13:46 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf_winresume.exe.mui_ff8b5358
[2013.11.21 22:23:45 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521.manifest
[2013.11.21 22:23:45 | 000,035,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521_winload.efi.mui_35ee487d
[2013.11.21 22:23:45 | 000,035,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521_winload.exe.mui_3bc5b827
[2013.11.21 22:23:45 | 000,030,800 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521_winresume.efi.mui_f412814e
[2013.11.21 22:23:45 | 000,030,800 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521_winresume.exe.mui_ff8b5358
[2014.03.01 01:10:28 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d.manifest
[2014.03.01 01:10:29 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d_winload.efi.mui_35ee487d
[2014.03.01 01:10:29 | 000,035,392 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d_winload.exe.mui_3bc5b827
[2014.03.01 01:10:29 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d_winresume.efi.mui_f412814e
[2014.03.01 01:10:29 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d_winresume.exe.mui_ff8b5358
[2013.11.21 22:35:17 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f.manifest
[2013.11.21 22:35:17 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f_winload.efi.mui_35ee487d
[2013.11.21 22:35:17 | 000,035,408 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f_winload.exe.mui_3bc5b827
[2013.11.21 22:35:17 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f_winresume.efi.mui_f412814e
[2013.11.21 22:35:17 | 000,030,800 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f_winresume.exe.mui_ff8b5358
[2014.03.01 10:43:19 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a.manifest
[2014.03.01 10:43:19 | 000,029,264 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a_winload.efi.mui_35ee487d
[2014.03.01 10:43:19 | 000,029,264 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a_winload.exe.mui_3bc5b827
[2014.03.01 10:43:19 | 000,026,688 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a_winresume.efi.mui_f412814e
[2014.03.01 10:43:20 | 000,026,688 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a_winresume.exe.mui_ff8b5358
[2014.03.01 02:42:33 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390.manifest
[2014.03.01 02:42:33 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390_winload.efi.mui_35ee487d
[2014.03.01 02:42:33 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390_winload.exe.mui_3bc5b827
[2014.03.01 02:42:33 | 000,027,200 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390_winresume.efi.mui_f412814e
[2014.03.01 02:42:33 | 000,027,200 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390_winresume.exe.mui_ff8b5358
[2014.03.01 03:45:13 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c.manifest
[2014.03.01 03:45:13 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c_winload.efi.mui_35ee487d
[2014.03.01 03:45:13 | 000,034,368 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c_winload.exe.mui_3bc5b827
[2014.03.01 03:45:13 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c_winresume.efi.mui_f412814e
[2014.03.01 03:45:13 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c_winresume.exe.mui_ff8b5358
[2014.03.01 01:54:19 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921.manifest
[2014.03.01 01:54:19 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921_winload.efi.mui_35ee487d
[2014.03.01 01:54:19 | 000,035,408 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921_winload.exe.mui_3bc5b827
[2014.03.01 01:54:19 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921_winresume.efi.mui_f412814e
[2014.03.01 01:54:19 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921_winresume.exe.mui_ff8b5358
[2014.03.01 06:50:11 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5.manifest
[2014.03.01 06:50:11 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5_winload.efi.mui_35ee487d
[2014.03.01 06:50:11 | 000,035,904 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5_winload.exe.mui_3bc5b827
[2014.03.01 06:50:11 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5_winresume.efi.mui_f412814e
[2014.03.01 06:50:11 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5_winresume.exe.mui_ff8b5358
[2014.03.01 07:54:44 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9.manifest
[2014.03.01 07:54:44 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9_winload.efi.mui_35ee487d
[2014.03.01 07:54:44 | 000,035,392 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9_winload.exe.mui_3bc5b827
[2014.03.01 07:54:44 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9_winresume.efi.mui_f412814e
[2014.03.01 07:54:44 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9_winresume.exe.mui_ff8b5358
[2014.03.01 07:20:12 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95.manifest
[2014.03.01 07:20:12 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95_winload.efi.mui_35ee487d
[2014.03.01 07:20:12 | 000,035,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95_winload.exe.mui_3bc5b827
[2014.03.01 07:20:12 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95_winresume.efi.mui_f412814e
[2014.03.01 07:20:12 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95_winresume.exe.mui_ff8b5358
[2014.03.01 04:07:52 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1.manifest
[2014.03.01 04:07:52 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1_winload.efi.mui_35ee487d
[2014.03.01 04:07:52 | 000,034,880 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1_winload.exe.mui_3bc5b827
[2014.03.01 04:07:52 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1_winresume.efi.mui_f412814e
[2014.03.01 04:07:52 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1_winresume.exe.mui_ff8b5358
[2014.03.01 03:02:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c.manifest
[2014.03.01 03:02:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c_winload.efi.mui_35ee487d
[2014.03.01 03:02:49 | 000,034,368 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c_winload.exe.mui_3bc5b827
[2014.03.01 03:02:49 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c_winresume.efi.mui_f412814e
[2014.03.01 03:02:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c_winresume.exe.mui_ff8b5358
[2014.03.01 06:20:47 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d.manifest
[2014.03.01 06:20:47 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d_winload.efi.mui_35ee487d
[2014.03.01 06:20:47 | 000,033,856 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d_winload.exe.mui_3bc5b827
[2014.03.01 06:20:47 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d_winresume.efi.mui_f412814e
[2014.03.01 06:20:47 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d_winresume.exe.mui_ff8b5358
[2014.03.01 08:37:19 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc.manifest
[2014.03.01 08:37:19 | 000,028,224 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc_winload.efi.mui_35ee487d
[2014.03.01 08:37:19 | 000,028,240 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc_winload.exe.mui_3bc5b827
[2014.03.01 08:37:19 | 000,026,192 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc_winresume.efi.mui_f412814e
[2014.03.01 08:37:19 | 000,026,176 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc_winresume.exe.mui_ff8b5358
[2014.03.01 01:26:22 | 000,004,290 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2014.03.01 01:26:22 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483_winload.efi.mui_35ee487d
[2014.03.01 01:26:22 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483_winload.exe.mui_3bc5b827
[2014.03.01 01:26:22 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483_winresume.efi.mui_f412814e
[2014.03.01 01:26:22 | 000,030,080 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483_winresume.exe.mui_ff8b5358
[2014.03.01 05:22:37 | 000,004,338 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2014.03.01 05:22:37 | 000,028,224 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6_winload.efi.mui_35ee487d
[2014.03.01 05:22:37 | 000,028,224 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6_winload.exe.mui_3bc5b827
[2014.03.01 05:22:37 | 000,026,496 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6_winresume.efi.mui_f412814e
[2014.03.01 05:22:37 | 000,026,496 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6_winresume.exe.mui_ff8b5358
[2013.11.21 14:51:03 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013.11.21 14:51:03 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013.11.21 14:51:03 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013.11.21 14:51:03 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013.11.21 14:51:03 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.13 19:14:44 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_2c7140780d007cbb.manifest
[2009.07.13 19:20:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_de-de_299cd5b40ed6d155.manifest
[2009.07.13 19:17:04 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_d2330346fdec39e3.manifest
[2009.07.13 18:44:20 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009.07.13 19:18:48 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_es-es_d2590890fddbcebf.manifest
[2009.07.13 19:17:04 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_71740d3df2f5c0e9.manifest
[2009.07.13 19:20:14 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75107e8ff0ade521.manifest
[2009.07.13 19:18:46 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_bc80fed7d50db43d.manifest
[2009.07.13 19:18:42 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_it-it_5f3874d6c7dfca9f.manifest
[2009.07.13 19:30:28 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_015df3e3bafadc7a.manifest
[2009.07.13 20:29:00 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_a4c7d098ad6ba390.manifest
[2009.07.13 19:17:06 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_8d5a51cd8590cf4c.manifest
[2009.07.13 19:12:48 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_8b999d0b86bcd921.manifest
[2009.07.13 19:12:18 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_d1d5f78d6bdf46d5.manifest
[2009.07.13 19:12:22 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_d429e2316a68dab9.manifest
[2009.07.13 19:18:42 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_d50bb19d69d84a95.manifest
[2009.07.13 19:20:24 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_1baec3614eb9d8c1.manifest
[2009.07.13 19:18:46 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_b7a9add645e2e31c.manifest
[2009.07.13 19:12:44 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_60b6f81d349ee50d.manifest
[2009.07.13 20:28:54 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_3214161ae4d6b72c.manifest
[2009.07.13 19:08:38 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_30bf0ea8e5b229bc.manifest
[2010.11.20 12:09:38 | 000,004,290 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010.11.20 14:33:18 | 000,004,338 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 06:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 02:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 40 bytes -> C:\ProgramData\MTA San Andreas All:NT
@Alternate Data Stream - 40 bytes -> C:\ProgramData:NT

< End of report >

OTL Extras logfile created on: 8.3.2014 17:22:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Honza\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 34,19% Memory free
4,00 Gb Paging File | 1,86 Gb Available in Paging File | 46,40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 160,33 Gb Free Space | 34,43% Space Free | Partition Type: NTFS

Computer Name: HONZA-PC | User Name: Honza | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02F63636-69AB-4A58-A45C-49F507BCA8E7}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{0842C987-46B6-4DA8-AD4B-EABDCD7A230C}" = lport=56678 | protocol=17 | dir=in | name=pando media booster |
"{11E9F72D-2D9A-41EE-8A57-8742CF63E43E}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{1E3AEB51-EA66-4C0C-B99C-6330EE33684B}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{27F221F8-265C-4608-8DC6-C9D9ECC97EB7}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{28E62D11-9D58-46CF-A88A-03021ACBD560}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{3560DD2B-4CD0-45E4-A6EA-FAFE7D87AC80}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{3AC84CE8-A87D-4058-ABD6-140B1B0C7C81}" = lport=56678 | protocol=6 | dir=in | name=pando media booster |
"{426F1760-1453-4F3B-AA35-B7808CD83D00}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{42E19FB4-89E0-49F2-ACC1-1D89F73D17CA}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{47086334-2F67-44D3-A21A-54C1F96AAA3F}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{49AFE576-0554-489D-ABF3-9D89C5D21BB2}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{4BD4AE40-0139-4B13-A76D-B1F1E8A50E81}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{5AC0A320-FBDD-49E8-BADA-8A9A4BCE0142}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{65061C81-39B4-4DD7-A2C7-64042F05E32C}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{7047D1ED-0017-4B15-8DFA-DF207EA35FC5}" = lport=20486 | protocol=17 | dir=in | name=bitcomet 20486 udp |
"{82852329-1DCC-462A-BB12-3E75091D8F09}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{A3355F93-B97A-4848-A926-41F9F23F1C96}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{A7BE09A0-695D-476D-AF73-0356F5D7E8A9}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{AB62E6A2-4D90-4585-A2E9-3208E2F3CE4E}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{ADA10FAD-EF7E-4AD5-AC35-F4B2CADBC6C0}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{B8618ECC-68D0-41C0-964D-B1C06604BD5D}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{C29B3E17-8D82-4D2C-8368-5A12DFF9A9B0}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{C9B408B3-CF1B-4AEF-B548-4E795650B0E1}" = lport=20486 | protocol=6 | dir=in | name=bitcomet 20486 tcp |
"{D214BD50-056A-4B1B-88B7-3B36B570C514}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{E4243841-6DAA-4B6E-BB22-AA9CC2654FE6}" = lport=56678 | protocol=17 | dir=in | name=pando media booster |
"{F02B57C4-3797-49DD-BF5E-46C79E80B359}" = lport=56678 | protocol=6 | dir=in | name=pando media booster |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0042F617-1A44-445D-827F-95459379D0DB}" = protocol=17 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"{0129EEFD-5223-428D-AAA1-65EFEE1715CC}" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source\hl2.exe |
"{036E894F-2BFF-44F4-BEEE-6E1AE6D12CFC}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\acrmp.exe |
"{09F94DDE-09D2-4EB9-97F7-C1F6D9DB9810}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\acbsp.exe |
"{0B8E5CD3-E1CD-4247-8E5E-5AC22212431D}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{0BFD7DC7-B52D-46CB-9C40-F6BC17A187F1}" = protocol=6 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"{0D07CA3E-E557-4F63-BF5D-038F3BF9556C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{159A1487-EB89-4532-8E10-24B9CC52DE9E}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{17BAFF6A-ACAA-401A-B19D-A1A420EF231F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{1B42B726-FF97-422F-A936-A7F147C6D927}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\assassinscreedrevelations.exe |
"{25D470D9-BEF0-4797-B327-F5CE37FBF2C4}" = protocol=17 | dir=in | app=c:\games\thief\binaries\win64\shipping-thiefgame.exe |
"{29071E4D-1954-4236-B578-2188478D7C4E}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{293C3453-67B0-48A7-8A93-82920F182E01}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{2A8E29EC-451E-4F3A-8E8E-4A5102C6B8B1}" = protocol=17 | dir=in | app=c:\games\thief\binaries\win32\shipping-thiefgame.exe |
"{32873AD7-699E-4C2A-BBC3-0B716AA317C4}" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"{353ACC85-AFF9-4D01-BCC3-5EC62446F8EB}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{3632737D-9C65-4452-A53B-0273015C75F8}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{37A0FDB2-D522-4E96-BA42-A8D859741B26}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{3FF27724-013F-4B88-9D9A-0060476FD251}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\uplaybrowser.exe |
"{41FB0E97-41F2-4B24-B211-5D6430D8804C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{42761497-2F89-4F46-A50A-54AE670C6F60}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{43BF32D2-0C3F-4CEF-8FA7-7C305FA788E7}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{44888759-AE9E-41F5-BFD5-7F851A7DE83A}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{4AA29E77-C3D3-4E83-BC4F-DF6FCB0F51CA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{4C5628FA-A08A-4F7A-B531-59A742117631}" = protocol=17 | dir=in | app=c:\program files (x86)\payday 2\payday2_win32_release.exe |
"{53876D30-74F9-4F77-A95C-A32710AB5629}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5BBEACAA-FF69-4384-A54F-7197551953BF}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{5DF57C3F-B7E4-43FD-9DAF-D32EF43B6CE2}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\uplaybrowser.exe |
"{6321172D-A7F6-4000-A461-05B3BC23209E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe |
"{6A63468A-804A-4A0D-A680-A6F391C52D17}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{6D9070B3-197B-4A66-A4D1-CC8DA4BB048C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\acrsp.exe |
"{70EE32C6-3819-4FA9-9843-412A891D02CB}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwaw.exe |
"{768D2306-1E0F-4BF3-ABEF-60156A3F0A91}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{7B19450F-B8FA-49F8-B7B1-B942C7D22CB4}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{80530C01-F57F-409C-92E2-8459E019C0B4}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwawmp.exe |
"{814A1620-824F-485C-8BB9-8DC0975FDA5F}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{8508D60F-B6EE-41A3-BE64-CAF9F640A92B}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{86F72BA0-1F29-4E0C-921D-A2B4F8C6D81F}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{87B7C590-A0B3-4655-9324-91CE55457084}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{8994B26B-A855-4DA1-926C-3F561A9C9168}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{8B8AB968-6FE5-4679-8D5D-82A5962F5BFF}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\assassinscreedbrotherhood.exe |
"{8FF1C711-9DD1-4659-AAB1-5725D8BE03FE}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\acrsp.exe |
"{9CA08FEF-8A9E-42B7-953E-E74D4138B7D8}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{9D8413B6-0F10-45F9-9E7C-DB1D560503CD}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{9E0D3976-8C13-40D0-9CF7-697229FD86BF}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\assassinscreedbrotherhood.exe |
"{9F0E70FA-A93A-429B-B52E-76C1854ECD4B}" = protocol=6 | dir=in | app=c:\games\thief\binaries\win32\shipping-thiefgame.exe |
"{A19939A1-46BF-4FA8-A24C-E6B486F04370}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{A2B52FDC-D89E-4648-8778-F4B72C522E53}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 1942\bf1942.exe |
"{A512CC6C-B7EA-45E0-B348-3B798DD5267C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{AD483417-0CB6-4306-860D-E87867876E02}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{B47248D9-FAB0-4343-9E46-6926AED3C1F3}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwaw.exe |
"{B5E74B01-3465-480C-ADA1-1332F071CBEB}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{B8367EB4-D6D4-4A1B-AA5F-E694C066FDCA}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{B86A2825-296B-4991-AA5E-C42D5BA47BA4}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\assassinscreedrevelations.exe |
"{BA1B84A8-B165-4006-B1A6-6D456944FF9E}" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source\hl2.exe |
"{BCFBCC57-40A9-4655-8539-BBBF9739FF67}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{BD7EB367-F8CA-47FA-AD40-AD9137159B62}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{C4D2462A-A7B6-4509-BF74-14897A591062}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{C4E1AD05-E30D-4F33-9756-5F0CB85F2225}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\acbsp.exe |
"{C69CCEF5-F5D7-4F4A-B1D6-33364EE85904}" = protocol=6 | dir=in | app=c:\program files (x86)\payday 2\payday2_win32_release.exe |
"{C7970353-8D9D-4D90-A6A5-B8D28E421F00}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwawmp.exe |
"{CB54CBAF-0E19-4668-A81D-885FA9085789}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 1942\bf1942.exe |
"{CD76D91E-9A5A-4AA8-84F4-415371556767}" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"{CEB96818-0111-4315-ADB3-A6C8C4BBC519}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{D31A2C7F-A617-47C4-B61B-57F01D89ED05}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{D43DBFEB-8657-42DD-B651-C32693A12036}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{D661606E-E676-4E4A-B0B8-1D904BCDFC61}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{D9477918-F4CC-4DEE-9311-65D907805D65}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{DE44D3EE-FC94-4062-892D-8D383EC34044}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed revelations\acrmp.exe |
"{E25EB397-9564-41DE-8476-C6BE35F452C6}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{E327BD62-463F-4CB9-9F95-ABE4D4BD6ACD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe |
"{E456D4DD-7868-4A03-9DCA-68881E71066E}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{E57517C0-46E4-4326-BF04-056CA2F58519}" = protocol=6 | dir=in | app=c:\games\thief\binaries\win64\shipping-thiefgame.exe |
"{E675174A-7A72-49A3-9DC8-A8EBEE74B63C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{E67FB6FE-0F14-44E1-A05A-21805E9CCFE2}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{EC7F0C21-43C5-49F9-A0DA-1EFA2A057A13}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{ECE4431D-4662-47E9-8B85-BEEA519B625C}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe |
"{EDFB7F28-3EBA-4CB6-B92D-A808B29979CD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{EF9ACA6F-CF5A-4E9F-871D-9400C0200060}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{EFB09885-729C-4B44-809C-2ACD958B27CA}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe |
"{F6B60E8A-AD30-4F0F-9964-5989B9E611B8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{F90FBB05-4766-4672-A4E7-A055239610E1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"TCP Query User{052BCCF5-F89F-4C0F-B9D6-A8C36DCB137E}C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe |
"TCP Query User{11B783B7-9848-4565-95D1-3DBAF29E76F6}C:\program files (x86)\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source\hl2.exe |
"TCP Query User{3BA6F9E5-6BCF-47ED-9B3D-37E9E31E6EB7}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"TCP Query User{62255123-3048-4F3F-9D21-C4E17AF915E4}C:\program files (x86)\counter-strike 1.6\csko.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike 1.6\csko.exe |
"TCP Query User{65B44177-3AFE-405D-9CDB-C6A9CC40C0DA}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{65E8CED9-5048-4027-B598-F6B717A64CE7}C:\program files (x86)\ubisoft\assassin's creed liberation hd\ac3lhd_32.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed liberation hd\ac3lhd_32.exe |
"TCP Query User{6EE6BA87-7CDD-4895-BF29-35C52AFCF072}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{71818378-24E1-463D-945B-61B80B2CBE54}C:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe" = protocol=6 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"TCP Query User{8E8006BD-CB30-45ED-B602-4BF877B4B56E}C:\downloads\7 days to die version 7.1 smartsteam fix installed (repaired version)\7daystodie.exe" = protocol=6 | dir=in | app=c:\downloads\7 days to die version 7.1 smartsteam fix installed (repaired version)\7daystodie.exe |
"TCP Query User{B859B2E8-D4DF-40A3-B52C-8283903E4582}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{D5A73C86-FD79-4EC7-A678-1D9785EF20E0}C:\program files (x86)\payday 2\payday2_win32_release.exe" = protocol=6 | dir=in | app=c:\program files (x86)\payday 2\payday2_win32_release.exe |
"TCP Query User{DF78C7A3-9197-46EC-B4FB-950979F6AFDC}C:\downloads\7 days to die version 7.2 smartsteam fix installed (repaired version)\7daystodie.exe" = protocol=6 | dir=in | app=c:\downloads\7 days to die version 7.2 smartsteam fix installed (repaired version)\7daystodie.exe |
"TCP Query User{E7B07A2D-E51C-4C89-94CC-706DC266A224}C:\program files (x86)\counter-strike global offensive\csgo.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike global offensive\csgo.exe |
"TCP Query User{FE058AAB-D4CA-417E-B40B-1808E6D90E86}C:\downloads\3dmgame-7.days.to.die.alpha.7.2.steam.edition.cracked-3dm\7 days to die\7daystodie.exe" = protocol=6 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.2.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"UDP Query User{0DC01967-3020-4A07-81AD-8C59932BCEBB}C:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe" = protocol=17 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.1.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"UDP Query User{1A703796-9394-4BC3-99A8-96673BA29AC7}C:\downloads\3dmgame-7.days.to.die.alpha.7.2.steam.edition.cracked-3dm\7 days to die\7daystodie.exe" = protocol=17 | dir=in | app=c:\downloads\3dmgame-7.days.to.die.alpha.7.2.steam.edition.cracked-3dm\7 days to die\7daystodie.exe |
"UDP Query User{27201221-B848-42E6-8E57-59D4A1C09C02}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{34088299-DC0C-4B0C-8952-9FB4B23BA10E}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{3A6937AC-E167-494F-9CBA-4A0913BA3D1F}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{64EDE91B-AF89-4C4D-80CD-A5873488B247}C:\downloads\7 days to die version 7.1 smartsteam fix installed (repaired version)\7daystodie.exe" = protocol=17 | dir=in | app=c:\downloads\7 days to die version 7.1 smartsteam fix installed (repaired version)\7daystodie.exe |
"UDP Query User{A27EEB33-842B-4A61-BB8B-0DCDD3D6F6E9}C:\program files (x86)\counter-strike global offensive\csgo.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike global offensive\csgo.exe |
"UDP Query User{A8D53DB3-E9DC-4CCA-B653-7F85C9BD1759}C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe |
"UDP Query User{D28ADDDA-343D-4753-BA6B-50BC1E0EC404}C:\program files (x86)\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source\hl2.exe |
"UDP Query User{DEA732B2-B5B0-4BC3-8271-56B21457D9CC}C:\program files (x86)\payday 2\payday2_win32_release.exe" = protocol=17 | dir=in | app=c:\program files (x86)\payday 2\payday2_win32_release.exe |
"UDP Query User{E3D8900D-452C-44AD-8C27-B3F190B03157}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"UDP Query User{E5409E28-76DC-4F36-983D-357CF3E5BAD2}C:\program files (x86)\ubisoft\assassin's creed liberation hd\ac3lhd_32.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed liberation hd\ac3lhd_32.exe |
"UDP Query User{EAB54D64-F54C-4300-9301-23ED15C97F1F}C:\downloads\7 days to die version 7.2 smartsteam fix installed (repaired version)\7daystodie.exe" = protocol=17 | dir=in | app=c:\downloads\7 days to die version 7.2 smartsteam fix installed (repaired version)\7daystodie.exe |
"UDP Query User{F99C6E1F-697A-412C-9A17-F93720A8365C}C:\program files (x86)\counter-strike 1.6\csko.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike 1.6\csko.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02A116A8-E559-488C-879C-B212F3EA963A}" = Far Cry (Patch 1.32 AMD64)
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417045FF}" = Java 7 Update 45 (64-bit)
"{50813B8C-FCBB-3C61-8039-EAAA93029066}" = Microsoft .NET Framework 4.5.1 (CSY)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B1920A83-25A3-4DBB-B1F5-2395BD05370E}" = ESET Smart Security
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 334.89
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 334.89
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 334.89
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.8.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 334.89
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.13.1220
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 10.11.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC" = GeForce Experience NvStream Client Components
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 10.11.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.19
"{E102B843-786A-4F58-AF75-6504570E207B}" = Microsoft Security Client
"CCleaner" = CCleaner
"Microsoft Security Client" = Microsoft Security Essentials
"WinRAR archiver" = WinRAR 5.00 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{19EF99D1-7EE6-4B5E-ABEE-0B3825F703B0}" = AwesomiumSetup
"{21A127AE-2DAF-40B7-8374-34C3E629521C}" = Far Cry (Patch 1.3)
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 51
"{33A22B2D-55BA-4508-B767-BF2E9C21A73F}" = Assassin's Creed Revelations
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3C662203-292F-4E9D-AE02-281071C06903}" = Far Cry (Patch 1.33)
"{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1" = System Explorer 4.5.0
"{46744C87-EE41-4BA3-A444-C2DECC145FC0}_is1" = Special Uninstaller version 2.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}" = Battlefield 1942™
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7CEA3557-5E36-49EE-9CBF-504EEA99E0DE}_is1" = "Thief"
"{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}" = Far Cry (Patch 1.4)
"{7F34A21F-2DEB-4598-BB19-611D6BD24271}" = Managed DirectX (0901)
"{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{91BA5476-8B26-49E4-84B2-9EFE10917B33}" = LogMeIn Hamachi
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{BB285C9F-C821-4770-8970-56C4AB52C87E}" = Skype Click to Call
"{BE4BA698-8533-4F77-9559-C7F3F78C0B05}" = Assassin's Creed Brotherhood
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D792A069-B96B-40BA-BCB4-E5651A6E5926}" = Far Cry (Patch 1)
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{EE8592F6-FC2B-4AFD-B527-109D127C039F}" = Far Cry (Patch 1.31)
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"17CBAF83-B4D1-41CC-B7DC-BFF1D4B9DDAC-live_is1" = ESO Survey Live version 1.4.5
"Adobe Acrobat 4.0" = Adobe Acrobat 4.0
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Assassins Creed Brotherhood (Cestina) 32bit 1.00" = Assassins Creed Brotherhood (Cestina) 32bit 1.00
"Assassin's Creed Liberation HD_is1" = Assassin's Creed Liberation HD
"BitComet_x64" = BitComet 1.36 64-bit
"Counter-Strike Global Offensive_is1" = Counter-Strike Global Offensive [No-Steam]
"Counter-Strike Source_is1" = Counter-Strike Source v81
"DAEMON Tools Lite" = DAEMON Tools Lite
"GameSpy Arcade" = GameSpy Arcade
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mafia II_is1" = Mafia II
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"MTA:SA 1.3" = MTA:SA v1.3.4
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"PAYDAY 2_is1" = PAYDAY 2
"PunkBusterSvc" = PunkBuster Services
"Razer Game Booster_is1" = Razer Game Booster
"Rockstar Games Social Club" = Rockstar Games Social Club
"Steam" = Steam
"Steam App 251570" = 7 Days to Die
"Steam App 4000" = Garry's Mod
"Steam App 440" = Team Fortress 2
"Steam App 550" = Left 4 Dead 2
"The Elder Scrolls Online Beta_is1" = The Elder Scrolls Online Beta
"UltraISO_is1" = UltraISO Premium V9.36
"Uplay" = Uplay
"VLC media player" = VLC media player 2.1.2

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Counter-Strike 1.6_is1" = Counter-Strike 1.6 v42
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 8.3.2014 6:40:01 | Computer Name = Honza-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 8.3.2014 6:40:01 | Computer Name = Honza-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 8.3.2014 7:19:01 | Computer Name = Honza-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: gta_sa.exe, verze: 0.0.0.0, časové razítko:
0x4270f18a Název chybujícího modulu: gta_sa.exe, verze: 0.0.0.0, časové razítko:
0x4270f18a Kód výjimky: 0xc0000005 Posun chyby: 0x003f08bd ID chybujícího procesu:
0xa44 Čas spuštění chybující aplikace: 0x01cf3abd3d7ebf3a Cesta k chybující aplikaci:
C:\Games\Grand Theft Auto San Andreas\gta_sa.exe Cesta k chybujícímu modulu: C:\Games\Grand
Theft Auto San Andreas\gta_sa.exe ID zprávy: 72c12c5f-a6b3-11e3-84b9-4061864afce3

Error - 8.3.2014 7:20:02 | Computer Name = Honza-PC | Source = Steam Client Service | ID = 1
Description = Error: Failed to poke open firewall

Error - 8.3.2014 11:16:42 | Computer Name = Honza-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 8.3.2014 11:16:42 | Computer Name = Honza-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 8.3.2014 11:22:21 | Computer Name = Honza-PC | Source = SideBySide | ID = 16842832
Description = Generování kontextu aktivace pro C:\Users\Honza\Downloads\esetsmartinstaller_csy.exe
se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku . Verze součásti požadovaná
aplikací je v konfliktu s jinou verzí součásti, která je již aktivní. Konfliktní
součásti: Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error - 8.3.2014 11:22:24 | Computer Name = Honza-PC | Source = SideBySide | ID = 16842832
Description = Generování kontextu aktivace pro C:\Users\Honza\Downloads\esetsmartinstaller_csy.exe
se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku . Verze součásti požadovaná
aplikací je v konfliktu s jinou verzí součásti, která je již aktivní. Konfliktní
součásti: Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error - 8.3.2014 11:24:40 | Computer Name = Honza-PC | Source = SideBySide | ID = 16842832
Description = Generování kontextu aktivace pro C:\Users\Honza\Downloads\esetsmartinstaller_csy.exe
se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku . Verze součásti požadovaná
aplikací je v konfliktu s jinou verzí součásti, která je již aktivní. Konfliktní
součásti: Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error - 8.3.2014 16:50:01 | Computer Name = Honza-PC | Source = LogMeIn Guardian | ID = 131176
Description = LogMeIn Guardian has detected a problem with the LogMeIn software
installed on this machine. The problem is locally identified by the following reference
ID: 'd6bfa8c4de9f43e38e075d1a06be1e80'.

[ System Events ]
Error - 19.1.2014 17:54:49 | Computer Name = Honza-PC | Source = DCOM | ID = 10010
Description =

Error - 20.1.2014 12:59:07 | Computer Name = Honza-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (17:57:55, ?20.?1.?2014) bylo neočekávané.

Error - 21.1.2014 9:55:20 | Computer Name = Honza-PC | Source = DCOM | ID = 10010
Description =

Error - 21.1.2014 9:55:21 | Computer Name = Honza-PC | Source = DCOM | ID = 10010
Description =

Error - 25.1.2014 7:47:21 | Computer Name = Honza-PC | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error - 25.1.2014 20:39:34 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7034
Description = Služba LogMeIn Hamachi Tunneling Engine byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 27.1.2014 8:49:27 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7030
Description = Služba LogMeIn Hamachi Tunneling Engine je označena jako interaktivní
služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní
služby. Tato služba nebude fungovat správně.

Error - 28.1.2014 16:36:48 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7034
Description = Služba TimeComX Pro Service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 29.1.2014 10:04:25 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Steam Client Service bylo dosaženo
časového limitu (30000 ms).

Error - 29.1.2014 10:04:25 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7000
Description = Služba Steam Client Service neuspěla při spuštění v důsledku následující
chyby: %%1053


< End of report >

Killer200120 píše:Ano muj kamarad mel dedu v microsoftu a pucil mi cd ze win7

Tak bud si z vas dela kamarad legraci nebo vy ze mne. V logu je zcela jasne patrne pouziti cracku na windows

tak tohle sem ja nevedel

To si poreste se svym kamaradem a dedou z microsoftu...

My se tu dle pravidel fora a charty mezinarodni aliance ASAP, jejiz jsme cleny, nelegalnimi systemy nezabyvame...