VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Milan at 2015-03-30 21:36:18
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 125 GB (41%) free of 305 GB
Total RAM: 4094 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:37:19, on 30. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SteelSeries Engine] C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Razer Overlay Subsystem Emergency Service (RzOvlMon) - Razer, Inc. - C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
O23 - Service: RzSurroundVADStreamingService - Unknown owner - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10970 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
taskeng.exe {B6D18886-A175-46D5-AF71-C4E0CAC6B3F0}
"taskhost.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE"
"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe" /StartService
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
adb fork-server server
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe"
"C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe"
"C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe" gpureading
"C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2536
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9d56d7c5-7303-429f-b792-5477d0d65d6f -SystemEventPortName:HostProcess-0eb0b952-fe00-4799-90ef-030c8903361e -IoCancelEventPortName:HostProcess-de7bd92e-620a-4f9e-8654-d5df16b093f6 -NonStateChangingEventPortName:HostProcess-91e727a4-9cc1-42ec-b9cd-30d9ccb9d1f9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:81185625-75ff-48bd-8b44-0d1ff979c98b -DeviceGroupId:WpdFsGroup
"C:\Program Files\iTunes\iTunesHelper.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\AVAST Software\Avast\avastui.exe" --type=gpu-process --channel="3836.0.100081490\627380892" --no-sandbox --lang=en-US --log-file="C:\Users\Milan\AppData\Roaming\AVAST Software\Avast\log\avastium.log" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Avastium (10.2.2214)" --proxy-auto-detect --disable-gpu --disable-software-rasterizer --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,38,46 --gpu-vendor-id=0x10de --gpu-device-id=0x0640 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4144 --lang=en-US --log-file="C:\Users\Milan\AppData\Roaming\AVAST Software\Avast\log\avastium.log" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Avastium (10.2.2214)" --proxy-auto-detect --disable-gpu --disable-software-rasterizer --no-sandbox /prefetch:822062411
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Milan\Desktop\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\z1l9g3v3.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=Doplnok iTunes Detector
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-13 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-14 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-13 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL [2012-10-01 1720976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-14 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2015-02-27 5583120]
"SteelSeries Engine"=C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [2014-10-09 87040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files (x86)\BlueStacks\HD-Agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\Program Files\OO Software\Defrag\oodtray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Razer Synapse]
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2015-03-12 590144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-10-18 13657304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TBPanel]
C:\Program Files (x86)\EXPERTool\TBPanel.exe [2013-03-25 2138408]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-03-18 5511352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.CFHD"=CFHD.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-30 21:36:18 ----D---- C:\rsit
2015-03-30 21:36:18 ----D---- C:\Program Files\trend micro
2015-03-30 17:02:14 ----A---- C:\Users\Milan\AppData\Roaming\vibranceGUI.ini
2015-03-30 15:32:03 ----D---- C:\Users\Milan\AppData\Roaming\csgoimg
2015-03-27 17:40:13 ----A---- C:\Windows\system32\nvshext.dll
2015-03-27 17:40:12 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-27 17:40:12 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-27 17:40:11 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-27 17:40:11 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-27 17:40:11 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-27 17:39:36 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-27 17:39:36 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-27 17:35:34 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-27 17:35:34 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-27 17:35:33 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-27 17:35:33 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-27 17:35:33 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-27 17:35:33 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-27 17:35:32 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-27 17:35:32 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-27 17:35:32 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-27 17:35:31 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-27 17:35:31 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-27 17:35:31 ----A---- C:\Windows\system32\nvdispgenco6434144.dll
2015-03-27 17:35:31 ----A---- C:\Windows\system32\nvdispco6434144.dll
2015-03-27 17:35:30 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-27 17:35:29 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-27 17:35:28 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-27 17:35:28 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-27 17:35:27 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-27 17:35:27 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-27 17:35:27 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-27 17:35:26 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-27 17:35:26 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-27 17:35:26 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-27 17:30:38 ----D---- C:\NVIDIA
2015-03-27 17:26:39 ----D---- C:\Users\Milan\AppData\Roaming\ProcessLasso
2015-03-25 16:59:38 ----D---- C:\Users\Milan\AppData\Roaming\SteelSeries
2015-03-25 16:59:06 ----D---- C:\ProgramData\SteelSeries
2015-03-25 16:56:39 ----D---- C:\Program Files\SteelSeries
2015-03-22 12:07:26 ----A---- C:\Windows\system32\drivers\rzpnk.sys
2015-03-22 12:06:53 ----A---- C:\Windows\system32\drivers\rzpmgrk.sys
2015-03-22 12:06:23 ----D---- C:\ProgramData\RzSurroundVAD_1.1.60.0
2015-03-22 12:06:15 ----A---- C:\Windows\system32\RzSurroundVADAudioDeviceManager_log.txt
2015-03-22 12:06:12 ----A---- C:\Windows\SYSWOW64\RzSurroundVADAudioDeviceManager_log.txt
2015-03-21 22:30:42 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-15 11:02:18 ----D---- C:\ProgramData\Auslogics
2015-03-15 11:00:28 ----D---- C:\Program Files (x86)\Auslogics
2015-03-14 18:33:43 ----A---- C:\Windows\ntbtlog.txt
2015-03-14 12:24:30 ----A---- C:\Windows\SYSWOW64\javaws.exe
2015-03-14 07:49:32 ----A---- C:\Windows\SYSWOW64\RzStats.IPC.dll
2015-03-13 16:19:00 ----D---- C:\Program Files\Common Files\DESIGNER
2015-03-13 15:40:21 ----D---- C:\Program Files\iPod
2015-03-13 15:40:21 ----D---- C:\Program Files (x86)\iTunes
2015-03-13 15:40:20 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-03-13 15:40:20 ----D---- C:\Program Files\iTunes
2015-03-13 15:34:50 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-03-13 15:34:50 ----A---- C:\Windows\SYSWOW64\javaw.exe
2015-03-13 15:34:50 ----A---- C:\Windows\SYSWOW64\java.exe
2015-03-13 15:23:13 ----A---- C:\Windows\system32\aswBoot.exe
2015-03-13 15:22:59 ----A---- C:\Windows\avastSS.scr
2015-03-13 15:22:42 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2015-03-11 20:02:27 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-03-11 20:00:59 ----D---- C:\Program Files (x86)\Microsoft Office
2015-03-11 20:00:56 ----D---- C:\Program Files\Microsoft Office
2015-03-11 20:00:50 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 19:59:57 ----RHD---- C:\MSOCache
2015-03-11 19:29:11 ----D---- C:\ProgramData\Microsoft Toolkit
2015-03-11 19:26:39 ----D---- C:\Program Files (x86)\Disc Soft
2015-03-11 19:25:24 ----A---- C:\Windows\system32\drivers\dtlitescsibus.sys
2015-03-11 19:24:16 ----D---- C:\Program Files\DAEMON Tools Lite

======List of files/folders modified in the last 1 month======

2015-03-30 21:37:19 ----D---- C:\Windows\Prefetch
2015-03-30 21:37:12 ----D---- C:\Windows\Temp
2015-03-30 21:36:18 ----D---- C:\Program Files
2015-03-30 21:30:50 ----D---- C:\Windows\system32\config
2015-03-30 21:14:01 ----D---- C:\Program Files (x86)\Steam
2015-03-30 17:08:34 ----RSD---- C:\Windows\assembly
2015-03-30 17:07:59 ----SHD---- C:\System Volume Information
2015-03-30 17:07:05 ----D---- C:\Windows\Logs
2015-03-30 17:06:14 ----D---- C:\Windows
2015-03-30 15:10:10 ----D---- C:\Users\Milan\AppData\Roaming\uTorrent
2015-03-30 14:57:12 ----D---- C:\Windows\System32
2015-03-30 14:57:12 ----D---- C:\Windows\inf
2015-03-30 14:57:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-27 17:40:38 ----D---- C:\ProgramData\NVIDIA Corporation
2015-03-27 17:40:33 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-27 17:40:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-03-27 17:40:30 ----D---- C:\ProgramData\NVIDIA
2015-03-27 17:39:36 ----D---- C:\Windows\SysWOW64
2015-03-27 17:39:12 ----D---- C:\Windows\system32\drivers
2015-03-27 17:39:08 ----D---- C:\Windows\system32\catroot
2015-03-27 17:39:06 ----D---- C:\Windows\system32\catroot2
2015-03-27 17:38:58 ----D---- C:\Windows\system32\DriverStore
2015-03-27 17:29:41 ----D---- C:\ProgramData
2015-03-27 17:29:38 ----D---- C:\Windows\system32\Tasks
2015-03-25 22:32:16 ----D---- C:\Users\Milan\AppData\Roaming\Skype
2015-03-25 20:06:52 ----D---- C:\Program Files\Common Files
2015-03-25 20:06:43 ----D---- C:\ProgramData\Logishrd
2015-03-22 12:07:37 ----D---- C:\ProgramData\Razer
2015-03-22 12:07:16 ----SHD---- C:\Windows\Installer
2015-03-22 12:07:16 ----D---- C:\Program Files (x86)\Razer
2015-03-22 12:04:04 ----A---- C:\Windows\system32\RzMaelstromVADAudioDeviceManager_log.txt
2015-03-22 11:51:01 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-21 22:43:52 ----RD---- C:\Program Files (x86)
2015-03-21 22:33:18 ----D---- C:\Users\Milan\AppData\Roaming\vlc
2015-03-20 21:51:13 ----D---- C:\Users\Milan\AppData\Roaming\TS3Client
2015-03-20 18:15:12 ----D---- C:\Users\Milan\AppData\Roaming\Adobe
2015-03-19 19:56:41 ----D---- C:\Windows\winsxs
2015-03-19 19:55:50 ----D---- C:\ProgramData\Adobe
2015-03-19 19:55:50 ----D---- C:\Program Files\Common Files\Adobe
2015-03-19 19:54:11 ----D---- C:\Program Files\Adobe
2015-03-19 19:02:33 ----D---- C:\Users\Milan\AppData\Roaming\OBS
2015-03-15 11:08:47 ----SHD---- C:\Boot
2015-03-14 19:00:01 ----D---- C:\Windows\system32\LogFiles
2015-03-14 14:44:41 ----D---- C:\ProgramData\Origin
2015-03-14 14:44:12 ----D---- C:\Program Files (x86)\Google
2015-03-14 14:42:55 ----D---- C:\Program Files (x86)\Common Files
2015-03-14 14:41:17 ----D---- C:\Users\Milan\AppData\Roaming\DAEMON Tools Lite
2015-03-14 14:37:38 ----D---- C:\Windows\Tasks
2015-03-14 14:37:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-03-14 11:08:15 ----D---- C:\ProgramData\Oracle
2015-03-14 11:06:45 ----D---- C:\Program Files (x86)\Java
2015-03-13 16:45:12 ----D---- C:\Windows\Microsoft.NET
2015-03-13 16:19:27 ----RSD---- C:\Windows\Fonts
2015-03-13 16:19:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-03-13 16:18:37 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-03-13 16:13:06 ----D---- C:\Program Files (x86)\OpenOffice 4
2015-03-13 15:40:20 ----D---- C:\Program Files\Common Files\Apple
2015-03-13 15:34:00 ----D---- C:\Program Files\WinRAR
2015-03-13 11:12:20 ----D---- C:\Windows\system32\wfp
2015-03-13 11:12:10 ----D---- C:\Users\Milan\AppData\Roaming\MAXON
2015-03-13 11:12:09 ----D---- C:\Program Files\MAXON
2015-03-13 11:11:41 ----D---- C:\Windows\system32\wbem
2015-03-13 11:11:41 ----D---- C:\Windows\registration
2015-03-13 11:10:57 ----D---- C:\Users\Milan\AppData\Roaming\Microsoft
2015-03-13 11:10:54 ----D---- C:\ProgramData\Microsoft
2015-03-07 21:12:18 ----D---- C:\Windows\system32\NDF
2015-03-01 18:33:59 ----D---- C:\Users\Milan\AppData\Roaming\TeamViewer
2015-03-01 18:29:14 ----D---- C:\Program Files\CCleaner

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-03-13 449896]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-03-13 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-03-13 268640]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 RzFilter;RzFilter; C:\Windows\system32\drivers\RzFilter.sys [2014-02-21 74432]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2015-03-11 381608]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-03-13 28144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-03-13 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-03-13 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-03-13 441728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-03-13 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-03-13 88408]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-03-13 136752]
R2 rzpmgrk;rzpmgrk; \??\C:\Windows\system32\drivers\rzpmgrk.sys [2015-02-05 37184]
R2 rzpnk;rzpnk; \??\C:\Windows\system32\drivers\rzpnk.sys [2015-03-03 129600]
R3 busenum;SteelBusSvc; C:\Windows\system32\DRIVERS\SteelBus64.sys [2014-10-08 146944]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2015-03-11 30352]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 nvoclk64;NVIDIA Enthusiasts Platform KDM; C:\Windows\system32\DRIVERS\nvoclk64.sys [2009-09-15 42088]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-02 187392]
R3 RzDxgk;RzDxgk; \??\C:\Windows\system32\drivers\RzDxgk.sys [2014-02-21 129472]
R3 RZSURROUNDVADService;Razer Surround Audio Service; C:\Windows\system32\drivers\RzSurroundVAD.sys [2015-02-09 40640]
R3 SAlphamHid;SteelHIDSvc; C:\Windows\system32\DRIVERS\SAlpham64.sys [2014-10-08 39168]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2015-02-22 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2015-02-22 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2015-02-22 30528]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 36928]
S3 HtcVCom32;HTC Diagnostic Port; C:\Windows\system32\DRIVERS\HtcVComV64.sys [2010-03-09 121800]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2014-03-19 76568]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2014-03-19 59160]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service; C:\Windows\system32\drivers\RzMaelstromVAD.sys [2014-03-06 40696]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0801;TAP-Win32 Adapter V8; C:\Windows\system32\DRIVERS\tap0801.sys [2005-04-13 30720]
S3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-08 31232]
S3 tapoas;TAP-Win32 Adapter OAS; C:\Windows\system32\DRIVERS\tapoas.sys [2012-07-15 30720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-07-28 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 77128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-03-13 343336]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-03-13 107448]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2009-09-14 166400]
R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2009-09-14 128512]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2013-11-18 87368]
R2 nTuneService;Performance Service; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [2011-09-19 278336]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706128]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-04 932040]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-06-16 76888]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2015-02-05 187072]
R2 RzOvlMon;Razer Overlay Subsystem Emergency Service; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [2014-02-21 32960]
R2 RzSurroundVADStreamingService;RzSurroundVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe [2015-02-03 4250624]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-05 4915040]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-02-27 1272592]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880]
S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-24 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14 268464]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-24 116648]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2011-08-30 160256]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-21 148080]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-27 836288]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-07 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL logfile created on: 31. 3. 2015 14:49:05 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Milan\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17420)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 56,97% Memory free
8,00 Gb Paging File | 5,94 Gb Available in Paging File | 74,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,08 Gb Total Space | 122,23 Gb Free Space | 41,01% Space Free | Partition Type: NTFS

Computer Name: MILAN-PC | User Name: Milan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2015/03/31 14:47:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Milan\Desktop\OTL.exe
PRC - [2015/03/21 22:30:48 | 000,376,944 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/03/18 18:23:46 | 005,511,352 | ---- | M] (Avast Software s.r.o.) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2015/03/13 15:22:56 | 000,343,336 | ---- | M] (Avast Software s.r.o.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2015/03/13 15:22:42 | 000,107,448 | ---- | M] (Avast Software s.r.o.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
PRC - [2015/02/05 02:25:00 | 000,187,072 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
PRC - [2015/01/16 08:41:08 | 001,706,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014/12/18 16:10:24 | 000,821,600 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
PRC - [2014/12/03 08:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/06/16 16:54:57 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2014/02/05 10:48:32 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2013/11/18 14:36:38 | 000,087,368 | ---- | M] (Nero AG) -- C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
PRC - [2012/12/07 18:26:56 | 000,167,424 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2012/09/23 09:08:44 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2015/03/13 15:23:03 | 040,540,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2015/03/13 15:23:01 | 001,359,872 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libGLESv2.dll
MOD - [2015/03/13 15:23:01 | 000,212,992 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libEGL.dll
MOD - [2015/03/13 15:22:58 | 000,104,400 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\log.dll
MOD - [2015/03/13 15:22:57 | 000,081,728 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
MOD - [2014/12/18 16:10:24 | 000,821,600 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe


========== Services (SafeList) ==========

SRV:64bit: - [2015/03/13 15:22:56 | 000,343,336 | ---- | M] (Avast Software s.r.o.) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2015/03/13 15:22:42 | 000,107,448 | ---- | M] (Avast Software s.r.o.) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - [2015/02/27 18:43:44 | 001,272,592 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
SRV:64bit: - [2014/11/06 05:30:08 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/09/14 06:00:00 | 000,166,400 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE -- (EPSON_EB_RPCV4_04)
SRV:64bit: - [2009/09/14 06:00:00 | 000,128,512 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE -- (EPSON_PM_RPCV4_04)
SRV:64bit: - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2015/03/27 23:52:30 | 000,836,288 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015/03/21 22:30:48 | 000,148,080 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/03/14 14:37:38 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/02/05 02:25:00 | 000,187,072 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe -- (Razer Game Scanner Service)
SRV - [2015/02/03 11:13:18 | 004,250,624 | ---- | M] (A-Volute) [Auto | Running] -- C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe -- (RzSurroundVADStreamingService)
SRV - [2015/01/16 08:41:08 | 001,706,128 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2015/01/02 20:45:12 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/12/03 08:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/06/16 16:54:57 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/02/21 07:10:22 | 000,032,960 | ---- | M] (Razer, Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe -- (RzOvlMon)
SRV - [2014/02/05 10:48:32 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2013/11/18 14:36:38 | 000,087,368 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe -- (HTCMonitorService)
SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/12/07 18:26:56 | 000,167,424 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2012/09/23 09:08:44 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)
SRV - [2011/09/19 17:59:40 | 000,278,336 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
SRV - [2011/08/30 16:55:54 | 000,160,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2015/03/13 15:23:06 | 000,441,728 | ---- | M] (Avast Software s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2015/03/13 15:23:06 | 000,268,640 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2015/03/13 15:23:06 | 000,136,752 | ---- | M] (Avast Software s.r.o.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
DRV:64bit: - [2015/03/13 15:23:06 | 000,093,528 | ---- | M] (Avast Software s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2015/03/13 15:23:06 | 000,088,408 | ---- | M] (Avast Software s.r.o.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2015/03/13 15:23:06 | 000,065,736 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2015/03/13 15:23:06 | 000,029,168 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:64bit: - [2015/03/13 15:22:48 | 001,047,320 | ---- | M] (Avast Software s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2015/03/13 15:22:48 | 000,028,144 | ---- | M] (Avast Software s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:64bit: - [2015/03/13 15:22:42 | 000,449,896 | ---- | M] (Avast Software s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdisFlt.sys -- (aswNdisFlt)
DRV:64bit: - [2015/03/11 19:25:24 | 000,030,352 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
DRV:64bit: - [2015/03/11 19:25:22 | 000,381,608 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2015/03/03 20:47:18 | 000,129,600 | ---- | M] (Razer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rzpnk.sys -- (rzpnk)
DRV:64bit: - [2015/02/09 09:17:56 | 000,040,640 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzSurroundVAD.sys -- (RZSURROUNDVADService)
DRV:64bit: - [2015/02/05 02:24:36 | 000,037,184 | ---- | M] (Razer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rzpmgrk.sys -- (rzpmgrk)
DRV:64bit: - [2014/10/08 17:30:28 | 000,146,944 | ---- | M] (SteelSeries Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SteelBus64.sys -- (busenum)
DRV:64bit: - [2014/10/08 17:30:28 | 000,039,168 | ---- | M] (SteelSeries Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SAlpham64.sys -- (SAlphamHid)
DRV:64bit: - [2014/07/28 14:52:00 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2014/07/02 20:49:08 | 000,026,200 | ---- | M] (SplitmediaLabs Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xspltspk.sys -- (XSplit_Dummy)
DRV:64bit: - [2014/03/19 02:24:40 | 000,059,160 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2014/03/19 02:24:38 | 000,076,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2014/03/06 11:37:30 | 000,040,696 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RzMaelstromVAD.sys -- (RZMAELSTROMVADService)
DRV:64bit: - [2014/02/21 07:04:07 | 000,129,472 | ---- | M] (Razer, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzDxgk.sys -- (RzDxgk)
DRV:64bit: - [2014/02/21 07:04:07 | 000,074,432 | ---- | M] (Razer, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\RzFilter.sys -- (RzFilter)
DRV:64bit: - [2013/10/02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/09/30 17:26:50 | 000,019,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio)
DRV:64bit: - [2013/09/30 17:26:48 | 000,012,504 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio)
DRV:64bit: - [2013/04/08 00:35:12 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2013/02/12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2012/12/07 19:27:50 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2012/08/23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/08/10 04:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2012/07/15 11:48:16 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tapoas.sys -- (tapoas)
DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/03/09 04:08:36 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcVComV64.sys -- (HtcVCom32)
DRV:64bit: - [2009/11/02 19:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/09/15 14:59:30 | 000,042,088 | ---- | M] (NVIDIA Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvoclk64.sys -- (nvoclk64)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2005/04/13 23:17:52 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0801.sys -- (tap0801)
DRV - [2015/02/22 22:59:07 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2015/02/22 16:20:23 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2015/02/22 16:20:12 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-1539924757-741334795-3694654142-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CE 96 8E 8E 05 DE CE 01 [binary data]
IE - HKU\S-1-5-21-1539924757-741334795-3694654142-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1539924757-741334795-3694654142-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-1539924757-741334795-3694654142-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1539924757-741334795-3694654142-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "SK"
FF - prefs.js..browser.search.highlightCount: 3
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "SK"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledAddons: %7Bc36177c0-224a-11da-8cd6-0800200c9a91%7D:3.9.85
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.2.0.187
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:36.0.4
FF - prefs.js..network.proxy.backup.ftp: "50.23.51.234"
FF - prefs.js..network.proxy.backup.ftp_port: 8118
FF - prefs.js..network.proxy.backup.socks: "50.23.51.234"
FF - prefs.js..network.proxy.backup.socks_port: 8118
FF - prefs.js..network.proxy.backup.ssl: "50.23.51.234"
FF - prefs.js..network.proxy.backup.ssl_port: 8118
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Milan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/03/13 15:23:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F003DA68-8256-4b37-A6C4-350FA04494DF}: C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 36.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 36.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/11/22 21:44:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Milan\AppData\Roaming\mozilla\Extensions
[2015/03/15 11:44:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Milan\AppData\Roaming\mozilla\Firefox\Profiles\z1l9g3v3.default\extensions
[2014/07/12 22:28:28 | 000,102,696 | ---- | M] () (No name found) -- C:\Users\Milan\AppData\Roaming\mozilla\firefox\profiles\z1l9g3v3.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
[2015/03/10 22:13:18 | 000,970,602 | ---- | M] () (No name found) -- C:\Users\Milan\AppData\Roaming\mozilla\firefox\profiles\z1l9g3v3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/03/21 22:30:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/03/21 22:30:48 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/03/13 15:23:12 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF

========== Chrome ==========

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.0.2502.149_0\
CHR - Extension: No name found = C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: No name found = C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb\5.6.5_0\
CHR - Extension: No name found = C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb\5.6.6_0\

O1 HOSTS File: ([2013/12/31 16:54:08 | 000,000,943 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (Avast Software s.r.o.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (Avast Software s.r.o.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1539924757-741334795-3694654142-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-1539924757-741334795-3694654142-1001..\Run: [SteelSeries Engine] C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (SteelSeries ApS)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3BFA5933-7DB2-448D-9D51-94E8AAE37A47}: DhcpNameServer = 8.8.8.8 8.8.4.4
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{6f3d448e-66a5-11e4-a5c5-001fd06aaef9}\Shell - "" = AutoRun
O33 - MountPoints2\{6f3d448e-66a5-11e4-a5c5-001fd06aaef9}\Shell\AutoRun\command - "" = I:\MAXON-Start.exe
O33 - MountPoints2\{702f4078-c814-11e4-9e52-001fd06aaef9}\Shell - "" = AutoRun
O33 - MountPoints2\{702f4078-c814-11e4-9e52-001fd06aaef9}\Shell\AutoRun\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{702f4078-c814-11e4-9e52-001fd06aaef9}\Shell\configure\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{702f4078-c814-11e4-9e52-001fd06aaef9}\Shell\install\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{92a0a04d-e32b-11e3-941f-001fd06aaef9}\Shell - "" = AutoRun
O33 - MountPoints2\{92a0a04d-e32b-11e3-941f-001fd06aaef9}\Shell\AutoRun\command - "" = I:\HTC_Sync_Manager_PC.exe
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\SETUP.EXE
O33 - MountPoints2\I\Shell\configure\command - "" = I:\SETUP.EXE
O33 - MountPoints2\I\Shell\install\command - "" = I:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.CFHD - File not found
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2015/03/31 14:47:43 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Milan\Desktop\OTL.exe
[2015/03/30 21:36:18 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2015/03/30 21:36:18 | 000,000,000 | ---D | C] -- C:\rsit
[2015/03/30 15:32:03 | 000,000,000 | ---D | C] -- C:\Users\Milan\AppData\Roaming\csgoimg
[2015/03/27 17:40:13 | 000,062,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2015/03/27 17:40:12 | 003,522,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2015/03/27 17:40:11 | 006,782,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2015/03/27 17:40:11 | 002,558,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2015/03/27 17:40:11 | 000,384,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2015/03/27 17:39:36 | 000,072,904 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2015/03/27 17:39:36 | 000,059,592 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2015/03/27 17:35:34 | 018,634,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2015/03/27 17:35:34 | 016,128,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2015/03/27 17:35:33 | 031,515,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2015/03/27 17:35:33 | 024,198,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2015/03/27 17:35:33 | 013,916,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2015/03/27 17:35:33 | 011,272,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2015/03/27 17:35:32 | 000,944,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2015/03/27 17:35:32 | 000,907,464 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2015/03/27 17:35:31 | 001,907,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434144.dll
[2015/03/27 17:35:31 | 001,555,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434144.dll
[2015/03/27 17:35:31 | 000,902,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2015/03/27 17:35:31 | 000,870,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2015/03/27 17:35:30 | 017,559,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2015/03/27 17:35:29 | 014,497,568 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2015/03/27 17:35:28 | 004,244,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2015/03/27 17:35:28 | 003,987,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2015/03/27 17:35:27 | 015,294,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2015/03/27 17:35:27 | 013,828,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2015/03/27 17:35:27 | 011,209,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2015/03/27 17:35:26 | 022,993,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2015/03/27 17:35:26 | 003,209,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2015/03/27 17:35:26 | 002,823,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2015/03/27 17:30:38 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2015/03/27 17:26:39 | 000,000,000 | ---D | C] -- C:\Users\Milan\AppData\Roaming\ProcessLasso
[2015/03/25 17:00:04 | 000,000,000 | ---D | C] -- C:\Users\Milan\AppData\Local\SteelSeries_ApS
[2015/03/25 16:59:38 | 000,000,000 | ---D | C] -- C:\Users\Milan\AppData\Roaming\SteelSeries
[2015/03/25 16:59:06 | 000,000,000 | ---D | C] -- C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
[2015/03/25 16:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\SteelSeries
[2015/03/25 16:56:39 | 000,000,000 | ---D | C] -- C:\Program Files\SteelSeries
[2013/11/12 21:30:40 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Milan\AppData\Roaming\pcouffin.sys
[2010/03/18 14:16:28 | 000,032,592 | ---- | C] (Microsoft Corporation) -- C:\Users\Milan\AppData\Roaming\4ZNBCFZLXP.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2015/03/31 14:52:24 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/03/31 14:48:12 | 000,020,704 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/03/31 14:48:12 | 000,020,704 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/03/31 14:47:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Milan\Desktop\OTL.exe
[2015/03/31 14:36:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/03/31 14:36:19 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2015/03/30 21:35:30 | 001,222,144 | ---- | M] () -- C:\Users\Milan\Desktop\RSITx64.exe
[2015/03/30 20:31:28 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/03/30 17:02:14 | 000,000,104 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\vibranceGUI.ini
[2015/03/30 16:32:57 | 008,155,719 | ---- | M] () -- C:\Users\Milan\Desktop\adobe lightroom (1 of 1).jpg
[2015/03/30 14:57:12 | 001,584,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/03/30 14:57:12 | 000,660,758 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2015/03/30 14:57:12 | 000,654,254 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/03/30 14:57:12 | 000,141,408 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2015/03/30 14:57:12 | 000,122,126 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2015/03/31 14:52:24 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/03/30 21:35:27 | 001,222,144 | ---- | C] () -- C:\Users\Milan\Desktop\RSITx64.exe
[2015/03/30 17:10:19 | 002,227,200 | ---- | C] () -- C:\Users\Milan\Desktop\vibgo_x64.exe
[2015/03/30 17:02:14 | 000,000,104 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\vibranceGUI.ini
[2015/03/30 16:32:48 | 008,155,719 | ---- | C] () -- C:\Users\Milan\Desktop\adobe lightroom (1 of 1).jpg
[2015/03/27 17:40:12 | 004,229,086 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2015/03/27 17:35:32 | 000,026,155 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2015/03/16 23:00:49 | 000,000,998 | ---- | C] () -- C:\Users\Milan\AppData\Local\recently-used.xbel
[2015/02/16 15:51:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\svc_host.dat
[2015/02/15 19:00:36 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2015/01/11 15:20:25 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\nvRegDev.dll
[2015/01/11 15:20:10 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\nvPhotoshopUtil.dll
[2015/01/11 15:20:10 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\nvISWOW64.dll
[2014/12/13 10:18:56 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2014/10/20 18:32:28 | 000,000,132 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
[2014/10/10 22:10:08 | 000,000,132 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\Adobe Formát Targa CS5 – předvolby
[2014/08/20 21:28:47 | 000,000,264 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\SkyStudioPro.ini
[2014/06/16 16:54:02 | 000,290,184 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014/06/16 16:54:01 | 002,580,552 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2014/06/16 16:54:01 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014/04/10 19:56:24 | 000,007,601 | ---- | C] () -- C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
[2014/03/30 19:36:14 | 000,034,816 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\RZR_0010068c43a8b07e19a394feb230.db
[2014/03/22 20:40:49 | 000,000,600 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\winscp.rnd
[2014/03/22 20:33:01 | 000,000,600 | ---- | C] () -- C:\Users\Milan\AppData\Local\PUTTY.RND
[2014/03/08 14:17:08 | 001,876,280 | ---- | C] () -- C:\Users\Milan\Localizable.strings
[2014/02/05 19:07:58 | 000,001,994 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\ltcdrid
[2014/01/26 11:38:46 | 000,000,354 | ---- | C] () -- C:\Users\Milan\openvpn-connect.json
[2013/12/30 22:40:08 | 000,000,893 | ---- | C] () -- C:\Windows\ARPR.INI
[2013/11/26 20:25:34 | 000,217,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013/11/12 21:30:40 | 000,099,384 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\inst.exe
[2013/11/12 21:30:40 | 000,007,859 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\pcouffin.cat
[2013/11/12 21:30:40 | 000,001,167 | ---- | C] () -- C:\Users\Milan\AppData\Roaming\pcouffin.inf
[2013/11/07 20:32:59 | 001,551,042 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

========== ZeroAccess Check ==========

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014/11/07 19:19:38 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\.minecraft
[2013/11/22 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\AdbDriverInstaller
[2014/12/05 16:22:35 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Audacity
[2014/10/19 09:39:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\AVAST Software
[2014/11/20 09:00:43 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Canon
[2014/11/19 22:08:54 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Canon_Inc_IC
[2014/09/09 15:46:35 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Cryptonium
[2015/03/30 15:32:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\csgoimg
[2015/03/14 14:41:17 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DAEMON Tools Lite
[2014/08/27 14:58:34 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DAEMON Tools Ultra
[2015/01/03 14:05:47 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Dimmdrive
[2014/03/04 08:03:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DogeCoin
[2013/12/11 17:57:08 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\EPSON
[2014/03/04 08:06:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Flappycoin
[2014/01/18 10:46:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\fp
[2014/08/20 22:05:29 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GoPro
[2013/12/07 16:35:23 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GSA Captcha Breaker
[2013/12/07 16:43:57 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GSA Search Engine Ranker
[2014/02/12 22:43:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Hideman
[2014/05/23 16:20:46 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\HTC
[2014/09/19 20:56:00 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MaxCoin
[2015/03/13 11:12:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MAXON
[2014/03/16 17:07:15 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Milestone
[2014/02/13 17:15:35 | 000,000,000 | RH-D | M] -- C:\Users\Milan\AppData\Roaming\mnrhost
[2014/02/19 19:33:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MultiBit
[2013/11/22 21:32:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\No Company Name
[2015/03/19 19:02:33 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\OBS
[2013/11/07 22:19:28 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\OpenOffice
[2014/05/03 17:24:40 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Oracle
[2014/03/29 20:46:16 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Origin
[2013/12/07 09:43:25 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\poclbm
[2014/10/04 16:34:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Primecoin
[2014/01/26 10:59:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\PrivateTunnel
[2015/03/27 17:26:39 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\ProcessLasso
[2014/09/27 13:12:19 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Red Giant Link
[2014/02/10 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Se7en Soft
[2014/01/14 08:16:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Seznam.cz
[2014/09/19 17:19:43 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\SplitmediaLabs
[2014/10/10 22:03:30 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2014/01/19 08:31:29 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\steamvr
[2015/03/25 16:59:38 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\SteelSeries
[2014/02/22 16:34:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Syncios
[2015/03/01 18:33:59 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\TeamViewer
[2015/03/20 21:51:13 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\TS3Client
[2013/11/28 08:01:37 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\UBot Studio
[2014/01/09 22:38:09 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Ufasoft
[2014/01/01 21:01:55 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Ulozto File Manager
[2014/07/22 09:59:37 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Unity
[2015/03/30 15:10:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\uTorrent
[2013/12/25 00:02:12 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\VOWSoft
[2014/11/07 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Vso
[2014/07/12 18:54:42 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Wireshark
[2013/11/18 18:01:53 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\WNR

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009/07/14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 07:08:49 | 000,032,612 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2015/03/14 14:37:38 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011/02/26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014/04/05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014/04/05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012/10/03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013/09/08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014/04/05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010/11/20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013/01/04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013/01/03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013/09/07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2009/07/14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013/07/06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012/10/03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2013/11/26 13:34:34 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=F55B41AA6114568AC558ADBABDA85620 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22525_none_11c3cc3c962abcc3\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2009/10/28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[65 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014/11/07 19:19:38 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\.minecraft
[2013/11/22 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\AdbDriverInstaller
[2015/03/20 18:15:12 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Adobe
[2014/10/10 22:03:30 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Adobe Mini Bridge CS5
[2014/05/23 16:19:46 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Apple Computer
[2014/12/05 16:22:35 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Audacity
[2014/10/19 09:39:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\AVAST Software
[2014/11/20 09:00:43 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Canon
[2014/11/19 22:08:54 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Canon_Inc_IC
[2014/09/09 15:46:35 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Cryptonium
[2015/03/30 15:32:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\csgoimg
[2015/03/14 14:41:17 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DAEMON Tools Lite
[2014/08/27 14:58:34 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DAEMON Tools Ultra
[2015/01/03 14:05:47 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Dimmdrive
[2014/03/04 08:03:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\DogeCoin
[2013/12/08 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\dvdcss
[2013/12/11 17:57:08 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\EPSON
[2014/03/04 08:06:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Flappycoin
[2014/01/18 10:46:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\fp
[2014/08/20 22:05:29 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GoPro
[2013/12/07 16:35:23 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GSA Captcha Breaker
[2013/12/07 16:43:57 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\GSA Search Engine Ranker
[2014/02/12 22:43:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Hideman
[2014/05/23 16:20:46 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\HTC
[2014/12/14 21:47:30 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Logishrd
[2014/12/14 21:54:09 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Logitech
[2013/11/07 20:24:05 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Macromedia
[2014/02/13 17:09:55 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Malwarebytes
[2014/09/19 20:56:00 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MaxCoin
[2015/03/13 11:12:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MAXON
[2015/03/13 11:10:57 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Microsoft
[2014/03/16 17:07:15 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Milestone
[2014/02/13 17:15:35 | 000,000,000 | RH-D | M] -- C:\Users\Milan\AppData\Roaming\mnrhost
[2013/11/22 21:44:33 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Mozilla
[2014/02/19 19:33:58 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\MultiBit
[2013/11/16 18:03:43 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Nero
[2013/11/22 21:32:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\No Company Name
[2015/03/19 19:02:33 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\OBS
[2013/11/07 22:19:28 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\OpenOffice
[2014/05/03 17:24:40 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Oracle
[2014/03/29 20:46:16 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Origin
[2013/12/07 09:43:25 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\poclbm
[2014/10/04 16:34:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Primecoin
[2014/01/26 10:59:03 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\PrivateTunnel
[2015/03/27 17:26:39 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\ProcessLasso
[2014/09/27 13:12:19 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Red Giant Link
[2014/02/10 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Se7en Soft
[2014/01/14 08:16:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Seznam.cz
[2015/03/25 22:32:16 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Skype
[2014/09/19 17:19:43 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\SplitmediaLabs
[2014/10/10 22:03:30 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2014/01/19 08:31:29 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\steamvr
[2015/03/25 16:59:38 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\SteelSeries
[2014/02/22 16:34:21 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Syncios
[2015/03/01 18:33:59 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\TeamViewer
[2015/03/20 21:51:13 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\TS3Client
[2013/11/28 08:01:37 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\UBot Studio
[2014/01/09 22:38:09 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Ufasoft
[2014/01/01 21:01:55 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Ulozto File Manager
[2014/07/22 09:59:37 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Unity
[2015/03/30 15:10:10 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\uTorrent
[2015/03/21 22:33:18 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\vlc
[2013/12/25 00:02:12 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\VOWSoft
[2014/11/07 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Vso
[2013/11/11 08:00:27 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\WinRAR
[2014/07/12 18:54:42 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\Wireshark
[2013/11/18 18:01:53 | 000,000,000 | ---D | M] -- C:\Users\Milan\AppData\Roaming\WNR

< %APPDATA%\*.exe /s >
[2010/03/18 14:16:28 | 000,032,592 | ---- | M] (Microsoft Corporation) -- C:\Users\Milan\AppData\Roaming\4ZNBCFZLXP.exe
[2014/11/07 19:22:31 | 000,099,384 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\inst.exe
[2013/11/22 18:22:42 | 000,228,352 | ---- | M] (AdbDriver.com) -- C:\Users\Milan\AppData\Roaming\AdbDriverInstaller\usb_driver\AdbDriverInstallerX64.exe
[2014/01/18 16:18:50 | 000,054,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Milan\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2015/03/19 19:02:22 | 000,252,928 | ---- | M] (obsproject.com) -- C:\Users\Milan\AppData\Roaming\OBS\updates\updater.exe
[2014/09/27 13:11:44 | 000,271,360 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\Red Giant Link\tools\RGLicenseCheck.exe
[2013/11/28 08:01:15 | 000,569,440 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\UBot Studio\Browser\4.0.94\UBotBrowser.exe
[2013/12/11 22:15:34 | 000,631,872 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\UBot Studio\Browser\4.2.20\Browser.exe
[2014/04/14 01:00:00 | 000,042,496 | ---- | M] () -- C:\Users\Milan\AppData\Roaming\uTorrent\uninstall.exe
[2014/04/14 01:00:00 | 000,398,760 | ---- | M] (BitTorrent, Inc.) -- C:\Users\Milan\AppData\Roaming\uTorrent\utorrent.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2015/03/31 15:28:06 | 000,000,830 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >
[2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2015/02/27 18:44:28 | 005,583,120 | ---- | M] (Disc Soft Ltd)
"SteelSeries Engine" = C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe -- [2014/10/09 21:44:14 | 000,087,040 | ---- | M] (SteelSeries ApS)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2015/03/21 22:30:48 | 000,376,944 | ---- | M] (Mozilla Corporation) MD5=ACAD0683F183CA0FCD0621D7659E161C -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2014/11/07 21:23:39 | 000,815,280 | ---- | M] (Microsoft Corporation) MD5=591C6FD1541BAFAEEE82B1F5831C8532 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2015/03/14 12:12:39 | 000,809,288 | ---- | M] (Google Inc.) MD5=F217EF2EA31D8F73504B1CD2F9787D9D -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2015/03/31 14:52:24 | 000,000,512 | ---- | M] () MD5=7F62661EB4D124D6838F50F1B5082AD2 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2014/08/02 19:26:05 | 000,006,784 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Anderstorp_2007\MODELS\road_crack.gmt
[2014/08/02 19:26:56 | 000,003,264 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Anderstorp_2007\MODELS\road_crack01.gmt
[2014/08/02 19:31:58 | 000,001,856 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Anderstorp_2007\MODELS\road_crack02.gmt
[2014/08/02 19:31:58 | 000,003,384 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Anderstorp_2007\MODELS\road_crack03.gmt
[2014/08/02 18:59:32 | 000,003,608 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Anderstorp_2007\TEXTURES\road_crack.dds
[2014/08/02 19:49:44 | 000,016,688 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Vara\MODELS\pitlane_crack.gmt
[2014/08/02 19:07:42 | 000,003,912 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Locations\Vara\TEXTURES\road_crack.dds
[2014/08/02 19:39:42 | 000,021,712 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Sounds\F3000_stonechip_windowcrack.wav
[2014/08/02 19:58:16 | 000,043,680 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Sounds\stonechip_windowcrack.wav
[2014/08/03 10:09:11 | 000,021,712 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Sounds\Car\F3000_stonechip_windowcrack_evo.wav
[2014/08/03 10:06:10 | 000,043,680 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\race 07\GameData\Sounds\Car\stonechip_windowcrack_evo.wav
[2010/03/25 16:51:32 | 000,243,712 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS6\Support Files\Plug-ins\Effects\Video_CoPilot_-_Optical_Flares_(Complete_Package)_Optical_Flares_(PC)_OpticalFlaresCrack(Spider).exe
[2012/03/02 06:24:04 | 001,159,409 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS6\Support Files\Presets\Image - Special Effects\Cracked Tiles.ffx
[2013/04/22 22:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler1.dll
[2013/04/22 22:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler2.dll
[2013/04/22 22:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler6.dll
[2013/11/04 22:54:38 | 000,062,238 | ---- | M] () -- \Program Files\GIMP 2\share\gimp\2.0\patterns\cracked.pat

< *keygen* /s >

< *loader* /s >
[2015/01/16 08:40:56 | 001,176,208 | ---- | M] () -- \NVIDIA\DisplayDriver\341.44\Win8_WinVista_Win7_64\International\GFExperience\ExtensionLoader.dll
[2015/01/16 08:41:08 | 000,888,464 | ---- | M] () -- \NVIDIA\DisplayDriver\341.44\Win8_WinVista_Win7_64\International\NVI2\NVDownloader.dll
[2015/01/16 08:39:56 | 000,028,515 | ---- | M] () -- \NVIDIA\DisplayDriver\341.44\Win8_WinVista_Win7_64\International\NVI2\NVI2DownloaderExt.CFG
[2015/01/16 08:41:08 | 000,850,576 | ---- | M] () -- \NVIDIA\DisplayDriver\341.44\Win8_WinVista_Win7_64\International\NVI2\NVI2DownloaderExt.DLL
[2010/03/09 04:28:40 | 005,297,608 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\Photodownloader.exe
[2010/03/09 01:38:58 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2010/03/09 01:38:58 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\de_de\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\en_us\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\es_es\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\it_it\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\no_no\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,308 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2010/03/09 01:39:00 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2012/09/23 09:08:36 | 003,296,336 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\PhotoDownloader.exe
[2013/11/22 22:07:10 | 000,000,025 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\PhotoDownloader.ini
[2012/09/23 15:01:54 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2012/09/23 15:04:36 | 000,000,273 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\apd\shared_assets\locales\cs_CZ\Photodownloader.ini
[2012/09/23 15:01:58 | 000,002,232 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\Assets\bitmaps\main_window\C_LoadError.PNG
[2012/09/23 09:59:16 | 000,113,232 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\CAHeadless\MXF_SDK_MetaMetadata_BinaryLoader_4.3.4.dll
[2012/09/23 09:59:20 | 000,203,856 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\CAHeadless\MXF_SDK_MetaMetadata_XSDLoader2_4.3.4.dll
[2012/09/23 09:59:24 | 000,152,144 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\CAHeadless\MXF_SDK_MetaMetadata_XSDLoader_4.3.4.dll
[2012/09/23 15:02:42 | 000,002,713 | ---- | M] () -- \Program Files (x86)\Adobe\Elements 11 Organizer\Mozilla\components\uriloader.xpt
[2014/04/08 10:13:18 | 000,009,216 | ---- | M] () -- \Program Files (x86)\Canon\ImageBrowser EX\SLRuntimeLoader.exe
[2012/05/16 16:49:28 | 000,000,244 | ---- | M] () -- \Program Files (x86)\Canon\ImageBrowser EX\SLRuntimeLoader.exe.config
[2014/02/25 19:01:48 | 000,921,088 | ---- | M] () -- \Program Files (x86)\Canon\ImageBrowser EX\UploaderForFacebook.exe
[2014/01/21 21:31:34 | 000,000,238 | ---- | M] () -- \Program Files (x86)\Canon\ImageBrowser EX\UploaderForFacebook.exe.config
[2014/02/25 19:01:48 | 000,011,776 | ---- | M] () -- \Program Files (x86)\Canon\ImageBrowser EX\en\UploaderForFacebook.resources.dll
[2011/11/10 21:20:08 | 000,015,435 | ---- | M] () -- \Program Files (x86)\Canon\Movie Uploader for YouTube\MovieUploaderForYouTube.chm
[2013/03/26 10:46:54 | 000,932,352 | ---- | M] () -- \Program Files (x86)\Canon\Movie Uploader for YouTube\MovieUploaderForYouTube.exe
[2012/06/26 12:28:58 | 000,000,238 | ---- | M] () -- \Program Files (x86)\Canon\Movie Uploader for YouTube\MovieUploaderForYouTube.exe.config
[2011/11/10 22:39:54 | 000,037,965 | ---- | M] () -- \Program Files (x86)\Canon\Movie Uploader for YouTube\ReadMe(MovieUploaderForYouTube).rtf
[2013/03/26 10:46:54 | 000,011,776 | ---- | M] () -- \Program Files (x86)\Canon\Movie Uploader for YouTube\en\MovieUploaderForYouTube.resources.dll
[2014/03/25 13:41:32 | 002,274,304 | ---- | M] () -- \Program Files (x86)\Canon\Uploader for CANON iMAGE GATEWAY\UploaderForCiG.exe
[2012/02/23 00:11:56 | 000,078,336 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012/02/23 00:11:56 | 000,155,136 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012/02/23 00:11:56 | 000,117,248 | ---- | M] () -- \Program Files (x86)\Common Files\Adobe\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2015/02/13 05:20:38 | 000,060,712 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Apple Application Support\YSLoader.exe
[2014/11/19 22:13:39 | 000,000,903 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Auto Update Interface Library\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2014/11/19 22:13:21 | 000,002,217 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library Core Common\uninstall_for_Movie Uploader for YouTube.xml
[2014/11/19 22:13:42 | 000,002,283 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library Core Common\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2014/11/19 22:13:23 | 000,000,815 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DC\uninstall_for_Movie Uploader for YouTube.xml
[2014/11/19 22:13:45 | 000,000,833 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DC\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2014/11/19 22:13:24 | 000,000,815 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DS\uninstall_for_Movie Uploader for YouTube.xml
[2014/11/19 22:13:47 | 000,000,833 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DS\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2014/11/19 22:13:26 | 000,000,815 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DV\uninstall_for_Movie Uploader for YouTube.xml
[2014/11/19 22:13:49 | 000,000,833 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\Image Handling Library DV\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2014/11/19 22:13:51 | 000,003,410 | ---- | M] () -- \Program Files (x86)\Common Files\Canon_Inc_IC\UniversalInstaller\Uninstall\MDL40Core\uninstall_for_Uploader for CANON iMAGE GATEWAY.xml
[2012/10/01 21:34:40 | 000,268,384 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2012/10/01 21:34:40 | 000,019,048 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2014/07/09 03:20:02 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\BUR\HTC Sync Manager=5=HTC Web how-tos=my\css\images\ajax-loader.gif
[2014/07/09 03:20:13 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\CSY\HTC Sync Manager=5=HTC Web how-tos=cs\css\images\ajax-loader.gif
[2014/07/09 03:20:16 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\DAN\HTC Sync Manager=5=HTC Web how-tos=da\css\images\ajax-loader.gif
[2014/07/09 03:20:20 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\DEU\HTC Sync Manager=5=HTC Web how-tos=de\css\images\ajax-loader.gif
[2014/07/09 03:20:24 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\ENU\HTC Sync Manager=5=HTC Web how-tos=en-US\css\images\ajax-loader.gif
[2014/07/09 03:20:28 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\ESP\HTC Sync Manager=5=HTC Web how-tos=es-ES\css\images\ajax-loader.gif
[2014/07/09 03:20:32 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\FRA\HTC Sync Manager=5=HTC Web how-tos=fr-FR\css\images\ajax-loader.gif
[2014/07/09 03:20:05 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\CHS\HTC Sync Manager=5=HTC Web how-tos=zh-CN\css\images\ajax-loader.gif
[2014/07/09 03:20:09 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\CHT\HTC Sync Manager=5=HTC Web how-tos=zh-TW\css\images\ajax-loader.gif
[2014/07/09 03:20:35 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\ITA\HTC Sync Manager=5=HTC Web how-tos=it\css\images\ajax-loader.gif
[2014/07/09 03:20:38 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\JPN\HTC Sync Manager=5=HTC Web how-tos=ja\css\images\ajax-loader.gif
[2014/07/09 03:20:41 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\NOR\HTC Sync Manager=5=HTC Web how-tos=no\css\images\ajax-loader.gif
[2014/07/09 03:20:44 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\PLK\HTC Sync Manager=5=HTC Web how-tos=pl\css\images\ajax-loader.gif
[2014/07/09 03:20:47 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\PTG\HTC Sync Manager=5=HTC Web how-tos=pt-PT\css\images\ajax-loader.gif
[2014/07/09 03:20:51 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\RUS\HTC Sync Manager=5=HTC Web how-tos=ru\css\images\ajax-loader.gif
[2014/07/09 03:20:55 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\App\SVE\HTC Sync Manager=5=HTC Web how-tos=sv\css\images\ajax-loader.gif
[2014/06/27 04:24:57 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\Fota\ENU\CSS\images\ajax-loader.gif
[2014/06/27 04:24:58 | 000,000,847 | ---- | M] () -- \Program Files (x86)\HTC\HTC Sync Manager\ui\Help\Fota\ESP\CSS\images\ajax-loader.gif
[2013/12/20 02:37:56 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013/12/20 02:37:56 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013/12/20 02:37:44 | 000,073,536 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013/12/20 02:37:44 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2014/07/29 14:34:32 | 000,029,696 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\javaloader.uno.dll
[2014/08/13 10:30:44 | 000,005,813 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.py
[2014/07/29 14:34:34 | 000,020,992 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.uno.dll
[2014/08/13 14:12:00 | 000,000,171 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\pythonloader.uno.ini
[2014/08/13 10:11:40 | 000,003,868 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\classes\unoloader.jar
[2014/07/29 10:07:24 | 000,013,501 | ---- | M] () -- \Program Files (x86)\OpenOffice 4\program\python-core-2.7.6\lib\unittest\loader.py
[2014/12/10 03:28:04 | 000,001,701 | ---- | M] () -- \Program Files (x86)\Steam\friends\broadcastuploaderrornotification.res
[2014/11/11 20:48:42 | 000,007,825 | ---- | M] () -- \Program Files (x86)\Steam\remoteui\static\libs\images\ajax-loader.gif
[2012/03/24 03:01:06 | 000,115,712 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS6\Support Files\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012/03/24 03:01:06 | 000,225,280 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS6\Support Files\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012/03/24 03:01:06 | 000,163,840 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS6\Support Files\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2012/03/13 13:10:54 | 003,297,128 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\Photodownloader.exe
[2012/03/13 11:42:26 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2012/03/13 11:42:28 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\combined_bitmaps\main_window\C_LoadError.png
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\de_de\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\en_us\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\es_es\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\it_it\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\no_no\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2012/03/13 11:42:28 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2012/03/13 11:42:30 | 000,000,324 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2012/03/13 11:42:30 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\photodownloader\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2013/04/17 23:20:32 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_BinaryLoader_4.4.13.dll
[2013/04/17 23:20:32 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_XSDLoader2_4.4.13.dll
[2013/04/17 23:20:32 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_XSDLoader_4.4.13.dll
[2012/03/16 01:17:30 | 000,115,712 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_BinaryLoader_4.4.3.dll
[2012/03/16 01:17:30 | 000,225,280 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_XSDLoader2_4.4.3.dll
[2012/03/16 01:17:30 | 000,163,840 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS6\MXF_SDK_MetaMetadata_XSDLoader_4.4.3.dll
[2013/12/02 17:33:02 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.22.dll
[2013/12/02 17:33:02 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.22.dll
[2013/12/02 17:33:02 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop Lightroom 5.3\Support\DynamicLinkMediaServer\dynamiclinkmediaserver\1.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.22.dll
[2012/09/22 16:42:22 | 000,113,256 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\MXF_SDK_MetaMetadata_BinaryLoader_4.3.4.dll
[2012/09/22 16:42:26 | 000,491,112 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\MXF_SDK_MetaMetadata_BinaryLoader_r.4.2.2.319.dll
[2012/09/22 16:42:30 | 000,203,880 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\MXF_SDK_MetaMetadata_XSDLoader2_4.3.4.dll
[2012/09/22 16:42:34 | 000,152,168 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\MXF_SDK_MetaMetadata_XSDLoader_4.3.4.dll
[2012/09/22 13:37:06 | 003,296,872 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\APD\Photo Downloader\Photodownloader.exe
[2012/09/21 04:28:32 | 000,000,860 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\APD\Photo Downloader\Photodownloader.exe.manifest
[2012/09/21 04:28:38 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\APD\shared_assets\bitmaps\main_window\C_LoadError.png
[2012/09/21 04:28:38 | 000,000,273 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\APD\shared_assets\locales\cs_CZ\Photodownloader.ini
[2012/09/21 04:45:56 | 000,002,713 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Elements 11\Mozilla\components\uriloader.xpt
[2013/04/22 22:22:24 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_BinaryLoader_4.4.13.dll
[2013/04/22 22:22:24 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_XSDLoader2_4.4.13.dll
[2013/04/22 22:22:24 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_XSDLoader_4.4.13.dll
[2015/03/13 15:22:55 | 000,072,440 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
[2015/03/13 15:22:56 | 000,085,336 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader64.exe
[2013/03/30 00:28:18 | 000,099,328 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.13.dll
[2013/03/30 00:28:18 | 000,196,608 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.13.dll
[2013/03/30 00:28:18 | 000,148,480 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.13.dll
[2015/02/13 05:20:22 | 000,077,096 | ---- | M] () -- \Program Files\Common Files\Apple\Apple Application Support\YSLoader.exe
[2012/10/01 21:34:40 | 000,364,128 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2012/10/01 21:34:40 | 000,019,048 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2011/03/08 09:43:28 | 000,013,734 | ---- | M] () -- \Program Files\GIMP 2\Python\Lib\unittest\loader.py
[2013/10/18 03:34:40 | 001,168,672 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{4F801879-55D3-496F-B078-62675136DC5E}\ExtensionLoader.dll
[2015/02/18 14:05:45 | 000,060,368 | ---- | M] () -- \Program Files\WinRAR\Ace32Loader.exe
[2014/11/19 22:13:18 | 000,001,378 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Movie Uploader for YouTube\Movie Uploader for YouTube Readme.lnk
[2014/12/15 18:26:30 | 000,072,638 | ---- | M] () -- \Users\Milan\AppData\Local\Skype\Apps\login\images\loader.gif
[2014/12/15 18:26:30 | 000,003,032 | ---- | M] () -- \Users\Milan\AppData\Local\Skype\Apps\login\images\loader.png
[2014/12/15 18:26:30 | 000,006,012 | ---- | M] () -- \Users\Milan\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif
[2014/12/15 18:26:30 | 000,021,956 | ---- | M] () -- \Users\Milan\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif
[2014/12/15 18:26:30 | 000,009,772 | ---- | M] () -- \Users\Milan\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png
[2014/09/23 17:30:25 | 000,000,786 | ---- | M] () -- \Users\Milan\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPad mil.kyselica\DiagnosticLogs\LanguageAssetLoader\LanguageAssetLoader_2014_09_17_21_25_290200.log
[2014/05/31 09:02:09 | 000,008,248 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\samples\Support4Demos\src\com\example\android\supportv4\app\LoaderCursorSupport.java
[2014/05/31 09:02:09 | 000,018,344 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\samples\Support4Demos\src\com\example\android\supportv4\app\LoaderCustomSupport.java
[2014/05/31 09:02:10 | 000,007,735 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\samples\Support4Demos\src\com\example\android\supportv4\app\LoaderRetainedSupport.java
[2014/05/31 09:02:10 | 000,019,313 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\samples\Support4Demos\src\com\example\android\supportv4\app\LoaderThrottleSupport.java
[2014/05/31 09:02:09 | 000,034,879 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\v4\src\java\android\support\v4\app\LoaderManager.java
[2014/05/31 09:02:09 | 000,010,434 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\v4\src\java\android\support\v4\content\AsyncTaskLoader.java
[2014/05/31 09:02:09 | 000,006,288 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\v4\src\java\android\support\v4\content\CursorLoader.java
[2014/05/31 09:02:09 | 000,014,743 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\extras\android\support\v4\src\java\android\support\v4\content\Loader.java
[2014/05/31 09:01:15 | 000,000,679 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw\loaderror.html
[2014/05/31 09:01:21 | 000,000,757 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-ar\loaderror.html
[2014/05/31 09:01:15 | 000,000,780 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-cs\loaderror.html
[2014/05/31 09:01:23 | 000,000,710 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-da\loaderror.html
[2014/05/31 09:01:26 | 000,000,703 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-de\loaderror.html
[2014/05/31 09:01:14 | 000,000,677 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-en-rGB\loaderror.html
[2014/05/31 09:01:16 | 000,000,705 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-es\loaderror.html
[2014/05/31 09:01:10 | 000,000,731 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-fi\loaderror.html
[2014/05/31 09:01:15 | 000,000,711 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-fr\loaderror.html
[2014/05/31 09:01:16 | 000,000,726 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-hu\loaderror.html
[2014/05/31 09:01:19 | 000,000,720 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-it\loaderror.html
[2014/05/31 09:01:28 | 000,000,752 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-iw\loaderror.html
[2014/05/31 09:01:16 | 000,000,754 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-ja\loaderror.html
[2014/05/31 09:01:27 | 000,000,746 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-ko\loaderror.html
[2014/05/31 09:01:15 | 000,000,690 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-nl\loaderror.html
[2014/05/31 09:01:15 | 000,000,726 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-pl\loaderror.html
[2014/05/31 09:01:16 | 000,000,774 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-pt-rBR\loaderror.html
[2014/05/31 09:01:18 | 000,000,715 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-rm\loaderror.html
[2014/05/31 09:01:27 | 000,000,803 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-ru\loaderror.html
[2014/05/31 09:01:10 | 000,000,776 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-th\loaderror.html
[2014/05/31 09:01:27 | 000,000,668 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-tr\loaderror.html
[2014/05/31 09:01:20 | 000,000,654 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-zh-rCN\loaderror.html
[2014/05/31 09:01:26 | 000,000,733 | ---- | M] () -- \Users\Milan\Desktop\adt-bundle-windows-\sdk\platforms\android-19\data\res\raw-zh-rTW\loaderror.html
[2009/07/14 14:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:41:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/03/04 13:03:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_69637bfcab8b6996\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/04/12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 17:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009/07/14 17:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009/07/14 17:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009/07/14 17:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009/07/14 17:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2013/11/08 16:02:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2013/11/08 16:02:51 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2013/11/08 16:02:51 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2013/11/08 16:02:51 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2013/11/08 16:02:51 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2013/11/09 09:56:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013/11/09 09:56:45 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013/11/09 09:56:45 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013/11/09 09:56:45 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013/11/09 09:56:45 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009/07/14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009/07/13 19:44:20 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009/07/14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011/02/05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011/02/05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010/11/20 07:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/03/04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/04/12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:054203E4

< End of report >

OTL Extras logfile created on: 31. 3. 2015 14:49:05 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Milan\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17420)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 56,97% Memory free
8,00 Gb Paging File | 5,94 Gb Available in Paging File | 74,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,08 Gb Total Space | 122,23 Gb Free Space | 41,01% Space Free | Partition Type: NTFS

Computer Name: MILAN-PC | User Name: Milan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1539924757-741334795-3694654142-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06297FC0-4321-4F58-85B5-24CA4F1D91FE}" = lport=445 | protocol=6 | dir=in | app=system |
"{0C9A96CE-CC27-40A0-89CF-EC286C7628EF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{0EC4CFFB-A071-48FF-945E-93D1916A2425}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0F4B3EB3-647A-47ED-BC12-ED50FAE302D2}" = lport=137 | protocol=17 | dir=in | app=system |
"{12C59473-A890-42D6-82E9-B2EB3F2ED3AC}" = lport=139 | protocol=6 | dir=in | app=system |
"{209132C2-9736-48F9-BB83-E21F36DAFE12}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{23028877-9A17-4681-97EA-F502987070F2}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{333E936D-6DEA-41F6-9545-404C8CD6E853}" = lport=138 | protocol=17 | dir=in | app=system |
"{39E2C36C-7A5D-4782-854E-8D7B252F80E9}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{41D5B1BF-D404-4E37-813E-32257B0CD446}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{43056E7C-87CF-4A1C-93C9-B0DF06711700}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49C571A6-3451-4ECE-B349-6D405F91854D}" = rport=445 | protocol=6 | dir=out | app=system |
"{4B603B54-E279-4C0E-87A6-A359E12FE16E}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{57C315F4-5E78-4457-B58C-134428728CEA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{871CE0CE-56F6-4355-B3ED-997A18F5B5D5}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{902AF712-67FF-49CE-B27F-80C47241F207}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{90EC20C0-CC78-4921-92F1-EEA5A00DCFDE}" = rport=139 | protocol=6 | dir=out | app=system |
"{937410A2-1F0C-42A1-9EA3-3F48278FD843}" = lport=10243 | protocol=6 | dir=in | app=system |
"{96DD44F8-F89E-4BEA-814E-1DF8032C6496}" = rport=10243 | protocol=6 | dir=out | app=system |
"{ABBFB9C2-A3B7-4C1F-AF12-9288B0C67510}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{AC761CCD-9CC3-4863-A414-0068F21219A5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BCAD67D5-B336-4FB6-9411-4568156072E8}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D553CD03-D0AD-4E78-AF6D-08EFB6EDCD39}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DAD6F88F-5464-48F6-95AF-5307550CB914}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DB0C14AA-D7F7-4381-8851-1DC684CBE3AA}" = rport=138 | protocol=17 | dir=out | app=system |
"{DF74973D-BEB9-46AC-9F2B-B3F6B49D2B6A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E69606AF-8704-4B02-99D4-38D9BCC31794}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E72C46A0-6589-420A-8424-192F2159A50B}" = rport=137 | protocol=17 | dir=out | app=system |
"{F23D9E06-B117-48D5-BA23-9D2FE7486A2C}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0080E85A-21D2-4A9D-938C-1F960B326298}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{040723AF-EFBC-4BD6-AC32-CC51AC72ECED}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\steamexpansionapp.exe |
"{085065CF-988B-4B8F-98BE-7F4312DF0FD0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{0CA9A735-4585-4B79-9183-02AAF51C42AC}" = dir=in | app=c:\program files (x86)\htc\htc sync manager\htcsyncmanager.exe |
"{18FDF688-0792-4915-A4AE-492C1102C1C8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1F8F2FCA-48B2-41A2-964F-C066FF0C573D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{237A118D-791C-4512-AB2A-D9ECDB1DA70E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{23D253A4-2265-48FA-A793-87DD27BA7FB6}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{2691500E-7720-4A51-9771-12260D6AC74B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x64\eurotrucks2.exe |
"{2F764573-4851-4729-95AD-CD8ADF5AAFA8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{36164867-7D8A-4876-A4F8-48F73DBC34B7}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{3996E636-422A-4662-AF85-9072893E78B2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{3ADFDE37-5F14-4165-AC1F-1899FB5AA756}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{4203049A-6959-42DE-B90D-C22BB0BDFC9A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{465185A8-F2A0-4A44-8BA9-D15FDF7B69B7}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{47F5AD28-4FF2-4856-89D3-6EFB00369C69}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4B2C6BB3-D853-4B72-B93B-E70A8EB16AF2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\steamproxy.exe |
"{4CC8614C-B75D-4067-91D9-9AAADAE97222}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{56D6C6CE-65AB-4069-A709-9117FCFD0083}" = protocol=6 | dir=out | app=system |
"{57BABC90-D48F-4399-90AE-C0E5BB789A0F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\steamexpansionapp.exe |
"{5B21F088-ABEC-427B-80E1-DD68FE9A23BB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5DB4E3DA-8801-4795-AFCF-7C276F9F22E1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{6065A2EE-1C2D-4072-BC5D-3B4B8E956B8A}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{6484B8DE-949E-4432-AD68-45B4B12D8044}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{68AC49C5-C1C1-45A4-BF77-361DAFCC5F5C}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{68F9F4D7-D975-4071-964A-CA7011EA73C7}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe |
"{69438A4A-553F-4616-8C0D-EEAF24BB669C}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{69B32C5D-497D-4E42-99D6-32E2E98C572B}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{6DBE966F-1A29-4FC8-9027-BE72C78DEC4F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{6F5BAE4C-DAAD-4F93-8F84-75E2D8C71016}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7029E303-7C3C-414B-84D2-564BA8EF9F96}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{71AD754E-3F8A-424A-9574-1079EEA849EE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"{750930FD-EFF8-4928-AEE9-084BB2A3E10F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{7B9A0588-DB3D-486E-BB27-2B7A4CCE3719}" = dir=in | app=c:\program files (x86)\htc\htc sync manager\htcsyncmanager.exe |
"{7CBFB0E2-7159-49BF-84AF-E5EB6792501C}" = dir=in | app=c:\program files (x86)\htc\htc sync manager\htcsyncmanager.exe |
"{858CD4BF-7B00-4B92-B1D0-D3C5AA7913A8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{8854C7CB-2656-4B6E-8E79-7BAA7E6BD1A5}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"{8FA737D8-95DA-4D4F-8255-0A4804072ABB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\steamproxy.exe |
"{911FD13B-7A50-4291-952E-CC7EA2B00C3B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe |
"{9150315D-486B-4A61-A696-173F4804946C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{94889026-0DC6-41E0-9C43-DF755AAAA1CE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{984A64F9-08C5-4435-94C1-9668F2281668}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{99BEAC96-EB16-4BC7-8636-082BF9923AD0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{9DD241DC-36FF-4C71-A465-A82B96D7CD70}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x64\eurotrucks2.exe |
"{9E05A77C-724D-4F19-81F8-02DD681CA35A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A027C3AF-6966-4318-88B7-95D246BF148F}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe |
"{A276A513-3519-4B3E-96E1-4154825A7E7C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A3ABC3B1-10E0-4EB9-AFFE-30E39B7851F9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\config.exe |
"{A3F01FF5-C3EF-4D8F-823F-9DEB43B20E8C}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{ACF5981E-F22A-46AB-B9FB-50D1D409F691}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{B1765436-C17F-430F-B6B3-79444416C1B1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B183C715-A61E-48C8-BE5F-14C9F8998195}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{BE28CBCB-648C-4F31-98F6-A71B0B15BDEE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\race 07\config.exe |
"{C9718A1F-70C4-4E46-8B5F-E4DF98756101}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{CB4D6E42-64EA-4B93-BC71-107E0BF351DA}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{CC06F476-EF91-492C-9E3D-8C7D4EA9F344}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{CFF586CB-093E-4E06-9E0C-6F3F925CBD5F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D1F9D4A3-2A1B-4C40-AEDD-DC812706907E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{D3B17429-38CC-45A3-9ADE-D5F1CCE9A812}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe |
"{D57A702B-1D08-4E32-9DCF-DAD4BE0D93D6}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{DD1354C8-1D98-4572-945B-DA430C80F155}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"{EDDAF170-E4D8-43A5-B39A-E5C87019D362}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{F7B42FC4-48B6-4870-8961-756A63BE6B20}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{F84387F1-7DA3-4154-81AF-34CBE6EBE3F1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{FA645796-B918-4194-9C85-BCFA51E5AA0B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FDB80E31-10E0-4C2C-98CC-837D13ABF6B5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FF7FF272-F21D-4174-BD5C-7FCC5C088B3D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"TCP Query User{59ACA125-5C8F-43D3-AA84-3A406D8101AF}C:\users\milan\desktop\microsoft toolkit.exe" = protocol=6 | dir=in | app=c:\users\milan\desktop\microsoft toolkit.exe |
"TCP Query User{62DFC015-1F13-4FDE-99EC-373E960F420E}C:\program files\adobe\adobe after effects cs6\support files\afterfx.exe" = protocol=6 | dir=in | app=c:\program files\adobe\adobe after effects cs6\support files\afterfx.exe |
"TCP Query User{8E7F900D-5459-41A2-B98A-F7F8B6B4AD65}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{B2070A80-0879-4F1F-A1E2-76A324091760}C:\program files\adobe\adobe premiere elements 11\adobe premiere elements.exe" = protocol=6 | dir=in | app=c:\program files\adobe\adobe premiere elements 11\adobe premiere elements.exe |
"TCP Query User{D3EBA738-2DD4-4119-8BDB-76962B5D514E}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{EBE918A9-D1B0-443D-B9AC-C1BF19B5114B}C:\users\milan\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\milan\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{3B0071E0-E45F-496E-8312-3F4EB9DFEB13}C:\program files\adobe\adobe after effects cs6\support files\afterfx.exe" = protocol=17 | dir=in | app=c:\program files\adobe\adobe after effects cs6\support files\afterfx.exe |
"UDP Query User{3EAC831C-C74D-41F6-BCFA-689CCF720219}C:\users\milan\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\milan\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{52E39D1C-1949-44C9-89F1-2CB7118CAD7F}C:\users\milan\desktop\microsoft toolkit.exe" = protocol=17 | dir=in | app=c:\users\milan\desktop\microsoft toolkit.exe |
"UDP Query User{5681A98D-5057-458E-BD69-943EDE1848C7}C:\program files\adobe\adobe premiere elements 11\adobe premiere elements.exe" = protocol=17 | dir=in | app=c:\program files\adobe\adobe premiere elements 11\adobe premiere elements.exe |
"UDP Query User{801CC8ED-52AE-432E-A9F0-44BC665BE1D7}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{F1B2CF21-0B05-44C4-917C-F6F9F02A2FD4}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0DF7096B-715A-4233-8633-C7A16ED6D616}" = Podpora Apple aplikácií(64-bit)
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{2DD71ACB-552D-402C-9529-7906ACB95C30}" = Adobe Photoshop Lightroom 5.3 64-bit
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{50813B8C-FCBB-3C61-8039-EAAA93029066}" = Microsoft .NET Framework 4.5.1 (CSY)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{66CF1DF9-1715-4325-89BC-76B1CA2EE3BE}" = Adobe Premiere Elements 11
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{7C419638-A20F-441A-8FE0-9D9724B1A793}" = Magic Bullet Suite 64-bit
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90150000-001B-0000-1000-0000000FF1CE}" = Microsoft Word 2013
"{90150000-001B-0405-1000-0000000FF1CE}" = Microsoft Word MUI (Czech) 2013
"{90150000-001F-0405-1000-0000000FF1CE}" = Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština
"{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-041B-1000-0000000FF1CE}" = Nástroje korektúry balíka Microsoft Office 2013 - slovenčina
"{90150000-002C-0405-1000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2013
"{90150000-006E-0405-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0405-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Czech) 2013
"{90150000-00E1-0405-1000-0000000FF1CE}" = Microsoft Office OSM MUI (Czech) 2013
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A27FDB06-60C8-4D5A-BB2F-8038FD151E3C}" = Trapcode Suite 64-bit
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 341.44
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafický ovládač 341.44
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Softvér systému s podporou technológie PhysX 9.13.1220
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B7CC660E-F31D-490C-BD2A-2CB2EC5A5E3A}" = Intel(R) Chipset Device Software
"{C4123106-B685-48E6-B9BD-E4F911841EB4}" = Apple Mobile Device Support
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D227565A-0033-40AD-89BA-653A205CDC11}" = iTunes
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.68
"DAEMON Tools Lite" = DAEMON Tools Lite
"Defraggler" = Defraggler
"EPSON SX218 Series" = EPSON SX218 Series Printer Uninstall
"GIMP-2_is1" = GIMP 2.8.8
"MAXON8B6F11F9" = CINEMA 4D 16.011
"NVIDIA Drivers" = NVIDIA Drivers
"Office15.WORD" = Microsoft Word 2013
"PremElem110" = Adobe Premiere Elements 11
"SteelSeries Engine" = SteelSeries Engine
"VLC media player" = VLC media player
"WinRAR archiver" = WinRAR 5.21 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{068A5D84-8419-4BDE-9689-FE65F412EFBB}_is1" = Syncios version 3.0.5
"{08208143-777D-4A06-BB54-71BF0AD1BB70}" = IPTInstaller
"{08466673-3905-4437-93E8-34A221B7CA4E}" = Fotogaléria
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}" = Razer Synapse
"{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{140754E1-C019-44A9-A81B-2D7625AABE8A}" = Photo Common
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{231D0C79-98A6-4693-A366-36DE7D7346EC}" = HTC Sync Manager
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.1
"{26A24AE4-039D-4CA4-87B4-2F83218040F0}" = Java 8 Update 40
"{28950295-A98C-4081-AC82-045E9879945E}" = Windows Live UX Platform Language Pack
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{447CDCE5-F555-429B-BFA6-642C3C6D684F}" = Podpora Apple aplikácií (32-bit)
"{456408C1-3BDE-48CC-9A5A-79B1BB4C4787}" = OpenOffice 4.1.1
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B12.1121.1
"{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
"{4817D846-700B-474E-A31B-80892B3E92E3}" = Adobe After Effects CS6
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CEEE5D0-F905-4688-B9F9-ECC710507796}" = HTC Driver Installer
"{505FF1AC-E7F5-4462-BBA7-08900E7E9EEF}" = Adobe Premiere Pro CC
"{551D9481-9487-4D0C-9A1D-6BC3E7B6D991}_is1" = EXPERTool v8.9
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}" = NVIDIA Photoshop Plug-ins 64 bit
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B77622E-DE90-48EA-B2C7-227B1DE58A01}" = Adobe AIR
"{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA Performance
"{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA67D612-0BE5-44D6-9A91-592958F754A1}" = Intel(R) C++ Redistributables on Intel(R) 64
"{AC76BA86-7AD7-1051-7B44-AB0000000001}" = Adobe Reader XI (11.0.10) - Slovak
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{B614E5FA-6DA4-45A1-845C-52F870240A89}" = PRE11 STI 64Installer
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{CFBFE244-6269-41DC-85B6-86F99C88ED02}" = Movie Maker
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D4D065E1-3ABF-41D0-B385-FC6F027F4D00}" = Elements 11 Organizer
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D9C4202E-6D51-4B06-A8F1-22316E654BCA}" = Universal Adb Driver
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{e48a2f61-851a-4155-82f9-af1b04db8c3b}" = Intel® Chipset Device Software
"{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}" = NVIDIA System Monitor
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FA29B84F-8306-4A62-A340-F2C41305E7AF}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Creative Cloud" = Adobe Creative Cloud
"Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI
"Audacity_is1" = Audacity 2.0.5
"AutoHotkey" = AutoHotkey 1.0.48.05
"Avast" = Avast Internet Security
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Digital Photo Professional" = Canon Utilities Digital Photo Professional
"EOS Utility" = Canon Utilities EOS Utility
"EPSON Scanner" = EPSON Scan
"EPSON SX218 Series Manual" = EPSON SX218 Series Manuál
"Fraps" = Fraps (remove only)
"FreePascal_is1" = Free Pascal 2.6.0
"Google Chrome" = Google Chrome
"Hideman" = Hideman
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"iBackupBot" = iBackupBot 5.1.0.3
"ImageBrowser EX" = Canon Utilities ImageBrowser EX
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B12.1121.1
"InstallShield_{7C419638-A20F-441A-8FE0-9D9724B1A793}" = Magic Bullet Suite 64-bit
"InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA Performance
"InstallShield_{A27FDB06-60C8-4D5A-BB2F-8038FD151E3C}" = Trapcode Suite 64-bit
"InstallShield_{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}" = NVIDIA System Monitor
"KLiteCodecPack_is1" = K-Lite Codec Pack 10.1.5 Basic
"Mozilla Firefox 36.0.4 (x86 sk)" = Mozilla Firefox 36.0.4 (x86 sk)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Open Broadcaster Software" = Open Broadcaster Software
"PhotoStitch" = Canon Utilities PhotoStitch
"Picture Style Editor" = Canon Utilities Picture Style Editor
"Prime Benchmark_is1" = Prime Benchmark 3.1
"Razer Core" = Razer Core
"Razer Surround" = Razer Surround
"Steam" = Steam
"Steam App 227300" = Euro Truck Simulator 2
"Steam App 4000" = Garry's Mod
"Steam App 40800" = Super Meat Boy
"Steam App 440" = Team Fortress 2
"Steam App 550" = Left 4 Dead 2
"Steam App 730" = Counter-Strike: Global Offensive
"Steam App 8600" = RACE 07
"Steam App 8660" = GTR Evolution
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 9" = TeamViewer 9
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1539924757-741334795-3694654142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"64f315a695d36dc0" = IdleMaster
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 14. 3. 2015 12:35:47 | Computer Name = Milan-PC | Source = Windows Search Service | ID = 7010
Description =

Error - 14. 3. 2015 13:01:55 | Computer Name = Milan-PC | Source = .NET Runtime | ID = 1022
Description =

Error - 16. 3. 2015 5:26:03 | Computer Name = Milan-PC | Source = Application Error | ID = 1000
Description = Názov chybovej aplikácie: plugin-container.exe, verzia: 36.0.1.5542,
časová značka: 0x54f851c0 Názov chybového modulu: mozalloc.dll, verzia: 36.0.1.5542,
časová značka: 0x54f8437e Kód výnimky: 0x80000003 Odstup chyby: 0x00001e02 Identifikácia
chybného procesu: 0x644 Čas spustenia chybnej aplikácie: 0x01d05fc55d7838ba Cesta
chybnej aplikácie: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe Cesta
chybného modulu: C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identifikácia
hlásenia: 76ef8c1b-cbbe-11e4-b988-001fd06aaef9

Error - 19. 3. 2015 10:05:56 | Computer Name = Milan-PC | Source = Application Error | ID = 1000
Description = Názov chybovej aplikácie: plugin-container.exe, verzia: 36.0.1.5542,
časová značka: 0x54f851c0 Názov chybového modulu: mozalloc.dll, verzia: 36.0.1.5542,
časová značka: 0x54f8437e Kód výnimky: 0x80000003 Odstup chyby: 0x00001e02 Identifikácia
chybného procesu: 0x1784 Čas spustenia chybnej aplikácie: 0x01d06236b244ffe7 Cesta
chybnej aplikácie: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe Cesta
chybného modulu: C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll Identifikácia
hlásenia: 0f871f8c-ce41-11e4-97d4-001fd06aaef9

Error - 26. 3. 2015 15:00:36 | Computer Name = Milan-PC | Source = Windows Search Service | ID = 3079
Description =

Error - 27. 3. 2015 11:41:08 | Computer Name = Milan-PC | Source = NVNetworkService | ID = 0
Description =

Error - 27. 3. 2015 12:36:03 | Computer Name = Milan-PC | Source = Windows Search Service | ID = 3079
Description =

Error - 30. 3. 2015 9:02:34 | Computer Name = Milan-PC | Source = .NET Runtime | ID = 1022
Description =

Error - 30. 3. 2015 15:36:09 | Computer Name = Milan-PC | Source = .NET Runtime | ID = 1022
Description =

Error - 30. 3. 2015 15:38:26 | Computer Name = Milan-PC | Source = .NET Runtime | ID = 1022
Description =

[ System Events ]
Error - 27. 3. 2015 12:36:04 | Computer Name = Milan-PC | Source = Microsoft-Windows-Kernel-General | ID = 6
Description =

Error - 27. 3. 2015 12:39:13 | Computer Name = Milan-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 17:37:00 on ?27. ?3. ?2015 was unexpected.

Error - 29. 3. 2015 4:54:11 | Computer Name = Milan-PC | Source = DCOM | ID = 10005
Description =

Error - 29. 3. 2015 4:54:11 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7009
Description = Počas čakania na pripojenie služby Windows Search bol dosiahnutý časový
limit (30000 ms).

Error - 29. 3. 2015 4:54:11 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7000
Description = Spustenie služby Windows Search zlyhalo kvôli nasledujúcej chybe:
%%1053

Error - 29. 3. 2015 10:24:46 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7022
Description = Služba Windows Update sa pri spustení zablokovala.

Error - 29. 3. 2015 10:44:52 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7009
Description = Počas čakania na pripojenie služby Steam Client Service bol dosiahnutý
časový limit (30000 ms).

Error - 29. 3. 2015 10:44:52 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7000
Description = Spustenie služby Steam Client Service zlyhalo kvôli nasledujúcej chybe:
%%1053

Error - 30. 3. 2015 15:29:29 | Computer Name = Milan-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 21:27:07 on ?30. ?3. ?2015 was unexpected.

Error - 30. 3. 2015 15:33:11 | Computer Name = Milan-PC | Source = Service Control Manager | ID = 7009
Description = Počas čakania na pripojenie služby Adobe Active File Monitor V11 bol
dosiahnutý časový limit (30000 ms).


< End of report >

Legalni system tam asi nebude co - ono nejvyssi licence (v hodnote nejake tisic) Ultimate zrovna neni bezna domaci verze

tak legálny ako legálny v ovládacich paneloch píše že systém Windows aj aktivován ale v skutočnosti som to inštaloval z dvd kde som nemusel zadať product key a pri pripojení k sieti sa sám aktivoval. A nepoužil som žiadny iný aktivátor (jeden mám na ploche ale to kvôli word 2013 )

Ano sam se aktivoval, jelikoz uz je to predaktivovane verze a to dvd urcite nebylo original od microsoftu ze

Legalni jako legalni neni, bud je zcela legalni a v souladu s licencnimi podminkami nebo je neleglani. A zde jevi jasne prvky pouziti aktivatoru (at uz treba jen samostatne v prubehu instalace).

Pak ale zde na foru pomoci nemuzeme, nase forum se dle pravidel fora a charty mezinarodni aliance ASAP, jejiz jsme cleny, nezabyva nelegalnimi systemy.

ok tak ďakujem aspoň za tú snahu

Neni zac, preji hezky zbytek vecera.