VIRY.CZ

Dobrý den,prosím o preventivku
Důvod: když zapnu PC, všechno přestane odpovídat
Logfile of random's system information tool 1.10 (written by random/random)
Run by Petr at 2015-05-17 11:44:58
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 59 GB (8%) free of 750 GB
Total RAM: 8153 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:45:04, on 17.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17801)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Gaming Keyboard\OSD.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Petr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: ArcPluginIEBHO - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O2 - BHO: Seznam.cz - {EA837F48-5AD1-443e-AE34-FFE03CBF3099} - C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\core.4.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AdobeCEPServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Start GeekBuddy.lnk = C:\Program Files\COMODO\GeekBuddy\launcher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Arc Service (ArcService) - Perfect World Entertainment Inc - C:\Program Files (x86)\Arc\ArcService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Chromodo Update Service (ChromodoUpdater) - Comodo - C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13447 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {C1376307-745F-4449-94FA-59930D47DEA1}
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Gaming Keyboard\OSD.exe"
"C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe"
taskmgr.exe /3
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\system32\viakaraokesrv.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe" --IPCport 5939
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6608.0.1744235181\107123715" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x1002 --gpu-device-id=0x6819 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.982.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.2.559101168\300501409" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.3.345967225\1257263437" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.4.1609293986\1776998640" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.5.1090279599\798851549" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.6.1616432742\613098311" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.11.224552853\708759625" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_09/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_09/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Enabled/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6608 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6608.12.1376680522\1966911575" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 880 884 892 65536 888
"C:\Users\Petr\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS.exe
C:\Windows\tasks\AutoKMSDaily.job - C:\Windows\AutoKMS.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d042414bcc1439.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042414c0351a8.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\m68i5m0m.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin]
"Description"=Arc PlayNow plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@raidcall.en/RCplugin]
"Description"=Raidcall plugin
"Path"=C:\Users\Petr\AppData\Roaming\raidcall\plugins\nprcplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@t.garena.com/garenatalk]
"Description"=Garena Talk Plugin
"Path"=C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.1]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.6.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\m68i5m0m.default\extensions\
jid1-4P0kohSJxU1qGg@jetpack
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-12 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-15 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84BFE29A-8139-402a-B2A4-C23AE9E1A75F}]
ArcPluginIEBHO Class - C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2015-04-09 125448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-12 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-27 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-15 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443e-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\core.4.dll [2012-03-09 1089568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-27 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-04-01 1426136]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2015-04-16 5595848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-05-15 2888384]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-04-17 31282304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4StoryPrePatch]
C:\Program Files (x86)\Gameforge4D\4Story_CZ\PrePatch.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aeria Ignite]
C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [2013-06-06 1925656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Akamai NetSession Interface]
C:\Users\Petr\AppData\Local\Akamai\netsession_win.exe [2014-10-29 4673432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe [2015-04-10 3632472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVI]
C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [2012-07-09 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GSplay.exe]
C:\Users\Petr\AppData\Local\Temp\Rar$EXa0.058\GSplay.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2015-03-30 3978600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MKLOL]
C:\Program Files (x86)\MKJogo\MKLOL\MK.exe -auto []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msjpxrSrv]
C:\Windows\inf\msjpxr.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Snap]
C:\Program Files (x86)\USB 2.0 PC CAMERA\Camera Snap.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tvncontrol]
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2013-09-17 2327248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Petr^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Petr\AppData\Roaming\Dropbox\bin\Dropbox.exe [2015-04-02 43382072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-08-09 5263504]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]
"VICTORY Gaming Keyboard"=C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [2013-11-11 270336]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"AdobeCEPServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [2013-03-13 1039248]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Start GeekBuddy.lnk - C:\Program Files\COMODO\GeekBuddy\launcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\launcher.exe]
"Debugger=""C:\Program Files (x86)\AVG PC TuneUp 2014\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux8"=wdmaud.drv
"wave9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-17 11:44:58 ----D---- C:\rsit
2015-05-17 11:44:58 ----D---- C:\Program Files\trend micro
2015-05-16 16:39:50 ----D---- C:\Users\Petr\AppData\Roaming\Tera_Awesomium
2015-05-15 17:32:08 ----HD---- C:\VTRoot
2015-05-15 17:32:01 ----A---- C:\Windows\system32\drivers\fvstore.dat
2015-05-15 15:13:51 ----D---- C:\Program Files (x86)\SpeedFan
2015-05-15 14:56:49 ----A---- C:\Windows\ntbtlog.txt
2015-05-13 07:38:55 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 07:38:55 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 07:23:43 ----A---- C:\Windows\system32\schannel.dll
2015-05-13 07:23:42 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-05-13 07:23:42 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-05-13 07:23:42 ----A---- C:\Windows\system32\certcli.dll
2015-05-13 07:23:35 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-05-13 07:23:35 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-05-13 07:23:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-05-13 07:23:35 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-05-13 07:23:35 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-05-13 07:23:35 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-05-13 07:23:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-05-13 07:23:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 07:23:34 ----A---- C:\Windows\system32\iernonce.dll
2015-05-13 07:23:34 ----A---- C:\Windows\system32\ie4uinit.exe
2015-05-13 07:23:33 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-05-13 07:23:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-05-13 07:23:33 ----A---- C:\Windows\system32\urlmon.dll
2015-05-13 07:23:33 ----A---- C:\Windows\system32\iedkcs32.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-05-13 07:23:32 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-05-13 07:23:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 07:23:32 ----A---- C:\Windows\system32\msfeeds.dll
2015-05-13 07:23:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 07:23:32 ----A---- C:\Windows\system32\dxtrans.dll
2015-05-13 07:23:31 ----A---- C:\Windows\system32\iesetup.dll
2015-05-13 07:23:31 ----A---- C:\Windows\system32\ieapfltr.dll
2015-05-13 07:23:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-05-13 07:23:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-05-13 07:23:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-05-13 07:23:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-05-13 07:23:30 ----A---- C:\Windows\system32\vbscript.dll
2015-05-13 07:23:30 ----A---- C:\Windows\system32\jsproxy.dll
2015-05-13 07:23:30 ----A---- C:\Windows\system32\ieUnatt.exe
2015-05-13 07:23:30 ----A---- C:\Windows\system32\iertutil.dll
2015-05-13 07:23:29 ----A---- C:\Windows\system32\mshtmled.dll
2015-05-13 07:23:29 ----A---- C:\Windows\system32\ieui.dll
2015-05-13 07:23:29 ----A---- C:\Windows\system32\ieframe.dll
2015-05-13 07:23:29 ----A---- C:\Windows\system32\dxtmsft.dll
2015-05-13 07:23:28 ----A---- C:\Windows\system32\wininet.dll
2015-05-13 07:23:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-05-13 07:23:28 ----A---- C:\Windows\system32\jscript9diag.dll
2015-05-13 07:23:28 ----A---- C:\Windows\system32\jscript9.dll
2015-05-13 07:23:28 ----A---- C:\Windows\system32\jscript.dll
2015-05-13 07:23:27 ----A---- C:\Windows\system32\msrating.dll
2015-05-13 07:23:27 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-05-13 07:23:27 ----A---- C:\Windows\system32\mshtml.dll
2015-05-13 07:23:25 ----A---- C:\Windows\system32\services.exe
2015-05-13 07:23:12 ----A---- C:\Windows\system32\UtcResources.dll
2015-05-13 07:23:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-05-13 07:23:12 ----A---- C:\Windows\system32\ntdll.dll
2015-05-13 07:23:12 ----A---- C:\Windows\system32\diagtrack.dll
2015-05-13 07:23:10 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-05-13 07:23:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-05-13 07:23:10 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-05-13 07:23:10 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-05-13 07:23:10 ----A---- C:\Windows\system32\tdh.dll
2015-05-13 07:23:10 ----A---- C:\Windows\system32\kernel32.dll
2015-05-13 07:23:10 ----A---- C:\Windows\system32\advapi32.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-05-13 07:23:09 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\wow64.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\winsrv.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\wdigest.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\typeperf.exe
2015-05-13 07:23:09 ----A---- C:\Windows\system32\tracerpt.exe
2015-05-13 07:23:09 ----A---- C:\Windows\system32\srcore.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\smss.exe
2015-05-13 07:23:09 ----A---- C:\Windows\system32\sechost.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\rstrui.exe
2015-05-13 07:23:09 ----A---- C:\Windows\system32\msv1_0.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\lsasrv.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\logman.exe
2015-05-13 07:23:09 ----A---- C:\Windows\system32\KernelBase.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\kerberos.dll
2015-05-13 07:23:09 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-05-13 07:23:09 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-05-13 07:23:09 ----A---- C:\Windows\system32\conhost.exe
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 07:23:08 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-05-13 07:23:08 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-05-13 07:23:08 ----A---- C:\Windows\system32\wow64win.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\wow64cpu.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\TSpkg.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\sspisrv.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\sspicli.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\srclient.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\secur32.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\relog.exe
2015-05-13 07:23:08 ----A---- C:\Windows\system32\ntvdm64.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\ncrypt.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\lsass.exe
2015-05-13 07:23:08 ----A---- C:\Windows\system32\diskperf.exe
2015-05-13 07:23:08 ----A---- C:\Windows\system32\csrsrv.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\credssp.dll
2015-05-13 07:23:08 ----A---- C:\Windows\system32\auditpol.exe
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 07:23:07 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\user.exe
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-05-13 07:23:07 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-05-13 07:23:07 ----A---- C:\Windows\system32\msobjs.dll
2015-05-13 07:23:07 ----A---- C:\Windows\system32\msaudite.dll
2015-05-13 07:23:07 ----A---- C:\Windows\system32\apisetschema.dll
2015-05-13 07:23:07 ----A---- C:\Windows\system32\adtschema.dll
2015-05-13 07:22:51 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-05-13 07:22:51 ----A---- C:\Windows\system32\FntCache.dll
2015-05-13 07:22:51 ----A---- C:\Windows\system32\DWrite.dll
2015-05-13 07:22:50 ----A---- C:\Windows\system32\win32k.sys
2015-05-13 07:22:47 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-05-13 07:22:47 ----A---- C:\Windows\system32\jnwmon.dll
2015-05-13 07:22:47 ----A---- C:\Windows\system32\InkEd.dll
2015-05-13 07:22:46 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-05-13 07:22:46 ----A---- C:\Windows\system32\wpdshext.dll
2015-05-13 07:22:44 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-05-13 07:22:44 ----A---- C:\Windows\system32\poqexec.exe
2015-05-13 07:22:43 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-05-13 07:22:43 ----A---- C:\Windows\system32\sdbinst.exe
2015-05-13 07:22:43 ----A---- C:\Windows\system32\apphelp.dll
2015-05-13 07:22:43 ----A---- C:\Windows\system32\aelupsvc.dll
2015-05-13 07:22:42 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-05-13 07:22:42 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-05-13 07:22:42 ----A---- C:\Windows\system32\shimeng.dll
2015-05-12 16:08:32 ----D---- C:\Users\Petr\AppData\Roaming\AVAST Software
2015-05-12 16:07:16 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-05-12 16:07:16 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-05-12 16:07:16 ----A---- C:\Windows\system32\drivers\aswSP.sys
2015-05-12 16:07:16 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-05-12 16:07:16 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2015-05-12 16:07:15 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2015-05-12 16:07:15 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-05-12 16:07:15 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-05-12 16:07:11 ----A---- C:\Windows\system32\aswBoot.exe
2015-05-12 16:06:56 ----A---- C:\Windows\avastSS.scr
2015-05-12 16:05:58 ----D---- C:\Program Files\AVAST Software
2015-05-12 16:05:07 ----D---- C:\ProgramData\AVAST Software
2015-05-11 10:46:27 ----D---- C:\Users\Petr\AppData\Roaming\raidcall
2015-05-11 10:46:16 ----D---- C:\Program Files (x86)\RaidCall

======List of files/folders modified in the last 1 month======

2015-05-17 11:44:59 ----D---- C:\Windows\Temp
2015-05-17 11:44:58 ----RD---- C:\Program Files
2015-05-17 11:43:29 ----D---- C:\Users\Petr\AppData\Roaming\Skype
2015-05-17 11:41:42 ----D---- C:\Windows\system32\config
2015-05-17 11:38:46 ----D---- C:\Program Files (x86)\Steam
2015-05-16 18:00:38 ----D---- C:\Users\Petr\AppData\Roaming\uTorrent
2015-05-16 16:29:32 ----D---- C:\ProgramData\boost_interprocess
2015-05-16 00:24:52 ----D---- C:\Users\Petr\AppData\Roaming\Audacity
2015-05-15 17:32:01 ----D---- C:\Windows\system32\drivers
2015-05-15 17:20:02 ----SHD---- C:\Windows\Installer
2015-05-15 17:20:02 ----SHD---- C:\Config.Msi
2015-05-15 15:23:52 ----RD---- C:\Program Files (x86)
2015-05-15 15:23:18 ----D---- C:\Windows\Tasks
2015-05-15 15:23:17 ----D---- C:\Windows\system32\Tasks
2015-05-15 15:13:50 ----D---- C:\Windows\SysWOW64
2015-05-15 15:01:28 ----D---- C:\ProgramData\Origin
2015-05-15 14:56:49 ----D---- C:\Windows
2015-05-15 14:49:23 ----D---- C:\ProgramData\Skype
2015-05-14 18:57:41 ----D---- C:\Windows\Prefetch
2015-05-14 16:22:02 ----D---- C:\Windows\Microsoft.NET
2015-05-14 16:06:16 ----RSD---- C:\Windows\assembly
2015-05-14 15:40:01 ----D---- C:\Program Files (x86)\StarCraft II
2015-05-14 15:36:20 ----D---- C:\Program Files (x86)\Battle.net
2015-05-14 07:37:34 ----D---- C:\Windows\winsxs
2015-05-14 07:35:38 ----SHD---- C:\System Volume Information
2015-05-14 06:48:59 ----D---- C:\Windows\System32
2015-05-14 06:48:59 ----D---- C:\Windows\inf
2015-05-14 06:48:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-14 06:38:27 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-05-14 06:38:26 ----D---- C:\Windows\system32\cs-CZ
2015-05-14 06:38:26 ----D---- C:\Program Files\Internet Explorer
2015-05-14 06:38:25 ----D---- C:\Windows\SYSWOW64\en-US
2015-05-14 06:38:24 ----D---- C:\Windows\system32\en-US
2015-05-14 06:38:22 ----D---- C:\Program Files (x86)\Internet Explorer
2015-05-14 06:37:50 ----D---- C:\Windows\AppPatch
2015-05-14 06:37:43 ----D---- C:\Program Files\Windows Journal
2015-05-14 06:37:38 ----D---- C:\Windows\system32\AdvancedInstallers
2015-05-14 06:37:34 ----D---- C:\Windows\system32\DriverStore
2015-05-14 06:37:33 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-14 01:19:48 ----D---- C:\ProgramData\Microsoft Help
2015-05-14 01:14:51 ----D---- C:\Windows\system32\MRT
2015-05-14 01:08:00 ----A---- C:\Windows\system32\MRT.exe
2015-05-13 23:49:09 ----D---- C:\Windows\system32\catroot2
2015-05-12 16:05:07 ----HD---- C:\ProgramData
2015-05-10 16:59:43 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-05-07 15:17:40 ----D---- C:\Windows\system32\NDF
2015-04-26 21:42:01 ----D---- C:\Users\Petr\AppData\Roaming\vlc
2015-04-22 18:00:30 ----D---- C:\Program Files (x86)\Arc
2015-04-21 19:35:33 ----D---- C:\ProgramData\Package Cache
2015-04-21 10:37:07 ----N---- C:\Windows\system32\MpSigStub.exe
2015-04-18 01:19:28 ----D---- C:\Users\Petr\AppData\Roaming\.minecraft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2012-04-11 82560]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2012-04-11 42624]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-12 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-12 272248]
R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2009-09-24 23304]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-07-16 386680]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2012-10-25 22680]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-12 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-12 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-05-12 442264]
R1 CFRMD;CFRMD; C:\Windows\system32\DRIVERS\CFRMD.sys [2013-05-07 37976]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2015-04-01 20696]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2015-04-01 797280]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2015-04-01 45880]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2015-04-16 246000]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2015-04-16 169792]
R1 HMD;COMODO livePCsupport Hardware Monitor Driver; C:\Windows\system32\DRIVERS\hmd.sys [2013-10-07 14888]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2015-04-01 104608]
R1 VirtDiskBus;3TB+ Unlock; C:\Windows\system32\DRIVERS\VirtDiskBus64.sys [2011-02-08 66160]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver2.sys [2012-09-24 57512]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-12 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-12 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-12 137288]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2015-04-16 159480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-11-01 42696]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-07-16 283064]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2012-08-07 65152]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2012-08-07 88832]
R3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM); C:\Windows\system32\DRIVERS\vrtaucbl.sys [2014-07-17 66728]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-03-30 56448]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2012-08-03 2206352]
S0 prohlp02;StarForce Protection Helper Driver v2; C:\Windows\System32\drivers\prohlp02.sys []
S0 prosync1;StarForce Protection Synchronization Driver v1; C:\Windows\System32\drivers\prosync1.sys []
S0 sfhlp01;StarForce Protection Helper Driver; C:\Windows\System32\drivers\sfhlp01.sys []
S1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys []
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-11-02 310984]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2009-09-24 27776]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2013-10-02 25640]
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-07-17 25640]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys []
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2013-10-02 30528]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2009-08-26 30344]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesDriver64.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbcamcl;Driver for video Device; C:\Windows\system32\DRIVERS\usbcamcl.sys []
S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-28 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-08-06 361984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-12 343336]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2015-04-01 5540424]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2015-04-16 1349576]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2014-07-18 9216]
R2 ChromodoUpdater;COMODO Chromodo Update Service; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2015-03-26 2306248]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-03-30 417552]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-06-30 76152]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-07-02 5037888]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2012-08-03 27792]
S2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
S2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-02 116648]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2015-03-30 2490216]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 ArcService;Arc Service; C:\Program Files (x86)\Arc\ArcService.exe [2015-04-16 88584]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2015-04-01 2265816]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-02 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-03-27 194032]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2011-08-30 160256]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-05-13 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-30 119408]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-04-10 1931632]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2015-01-17 762320]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 CLPSLauncher;COMODO LPS Launcher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [2013-09-19 70352]
S4 GeekBuddyRSP;GeekBuddyRSP Server; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2013-09-17 2327248]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Zdravim

Nedavejte logy do Code, spatne se to cte.

Kdy problem zacal?

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

OTL logfile created on: 17.5.2015 12:47:34 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Petr\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17801)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,96 Gb Total Physical Memory | 4,97 Gb Available Physical Memory | 62,45% Memory free
15,92 Gb Paging File | 12,31 Gb Available in Paging File | 77,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 732,42 Gb Total Space | 58,19 Gb Free Space | 7,94% Space Free | Partition Type: NTFS
Drive D: | 1130,50 Gb Total Space | 1116,09 Gb Free Space | 98,73% Space Free | Partition Type: NTFS

Computer Name: PETR-PC | User Name: Petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2015.05.17 12:46:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Petr\Desktop\OTL.exe
PRC - [2015.05.13 20:22:51 | 000,812,872 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015.05.12 16:07:36 | 005,515,496 | ---- | M] (Avast Software s.r.o.) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2015.05.12 16:06:54 | 000,343,336 | ---- | M] (Avast Software s.r.o.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2015.04.16 13:59:18 | 001,349,576 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
PRC - [2015.03.26 08:41:16 | 002,306,248 | ---- | M] (Comodo) -- C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
PRC - [2014.07.02 11:45:04 | 004,606,784 | ---- | M] (TeamViewer GmbH) -- c:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Desktop.exe
PRC - [2014.07.02 11:45:03 | 013,115,712 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
PRC - [2014.07.02 11:45:03 | 005,037,888 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2014.07.02 11:30:03 | 000,229,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
PRC - [2014.06.30 09:58:02 | 000,076,152 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013.11.11 17:42:50 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\OSD.exe
PRC - [2013.11.11 17:38:56 | 000,270,336 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE


========== Modules (No Company Name) ==========

MOD - [2015.05.12 16:07:10 | 040,540,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2015.05.12 16:07:09 | 000,104,400 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\log.dll
MOD - [2015.05.12 16:07:08 | 000,081,728 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
MOD - [2015.05.05 06:06:52 | 001,252,680 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libglesv2.dll
MOD - [2015.05.05 06:06:52 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libegl.dll
MOD - [2013.11.11 17:42:50 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\OSD.exe
MOD - [2013.11.11 17:38:56 | 000,270,336 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
MOD - [2013.09.05 01:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2013.03.08 07:17:18 | 001,425,920 | ---- | M] () -- C:\Program Files (x86)\SplitMediaLabs\XSplit\avformat-54.dll
MOD - [2013.03.08 07:17:18 | 000,188,416 | ---- | M] () -- C:\Program Files (x86)\SplitMediaLabs\XSplit\avutil-52.dll
MOD - [2013.03.08 07:17:18 | 000,096,256 | ---- | M] () -- C:\Program Files (x86)\SplitMediaLabs\XSplit\swresample-0.dll
MOD - [2013.03.08 07:17:05 | 000,336,896 | ---- | M] () -- C:\Program Files (x86)\SplitMediaLabs\XSplit\swscale-2.dll
MOD - [2013.03.08 07:17:04 | 007,816,192 | ---- | M] () -- C:\Program Files (x86)\SplitMediaLabs\XSplit\avcodec-54.dll
MOD - [2012.11.05 09:37:28 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\hiddriver.dll
MOD - [2012.11.05 09:09:48 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\lan.dll


========== Services (SafeList) ==========

SRV:64bit: - [2015.05.13 07:23:35 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2015.05.13 07:23:12 | 001,254,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:64bit: - [2015.05.12 16:06:54 | 000,343,336 | ---- | M] (Avast Software s.r.o.) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2015.04.16 13:59:18 | 001,349,576 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2015.04.01 18:48:32 | 005,540,424 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (CmdAgent)
SRV:64bit: - [2015.04.01 18:44:06 | 002,265,816 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012.08.06 12:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012.08.03 07:27:50 | 000,027,792 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:64bit: - [2012.07.28 04:09:45 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2015.04.16 17:27:59 | 000,088,584 | ---- | M] (Perfect World Entertainment Inc) [On_Demand | Stopped] -- C:\Program Files (x86)\Arc\ArcService.exe -- (ArcService)
SRV - [2015.04.15 15:47:22 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015.04.10 07:22:29 | 001,931,632 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2015.03.30 19:44:13 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015.03.30 15:29:00 | 002,490,216 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2015.03.30 15:25:28 | 000,417,552 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2015.03.26 08:41:16 | 002,306,248 | ---- | M] (Comodo) [Auto | Running] -- C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe -- (ChromodoUpdater)
SRV - [2015.02.19 01:51:18 | 000,835,776 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015.02.18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015.01.17 19:03:18 | 000,762,320 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2014.11.17 19:24:23 | 000,182,304 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Windows\SysWOW64\EasyAntiCheat.exe -- (EasyAntiCheat)
SRV - [2014.07.18 20:13:20 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2014.07.14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014.07.14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014.07.02 11:45:03 | 005,037,888 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014.06.30 09:58:02 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014.04.12 00:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014.03.21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013.09.19 11:14:46 | 000,070,352 | ---- | M] (Comodo Security Solutions, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
SRV - [2013.09.17 12:00:52 | 002,327,248 | ---- | M] (Comodo Security Solutions, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
SRV - [2011.08.30 15:55:54 | 000,160,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2015.05.12 16:07:10 | 000,442,264 | ---- | M] (Avast Software s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2015.05.12 16:07:10 | 000,272,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2015.05.12 16:07:10 | 000,093,528 | ---- | M] (Avast Software s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2015.05.12 16:07:10 | 000,089,944 | ---- | M] (Avast Software s.r.o.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2015.05.12 16:07:10 | 000,065,736 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2015.05.12 16:07:10 | 000,029,168 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:64bit: - [2015.05.12 16:07:05 | 001,047,320 | ---- | M] (Avast Software s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2015.05.12 16:07:00 | 000,137,288 | ---- | M] (Avast Software s.r.o.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
DRV:64bit: - [2015.04.16 13:59:28 | 000,246,000 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2015.04.16 13:59:27 | 000,159,480 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV:64bit: - [2015.04.16 13:59:26 | 000,169,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2015.04.01 18:49:46 | 000,020,696 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\cmderd.sys -- (cmderd)
DRV:64bit: - [2014.12.30 15:41:48 | 000,086,352 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\wolfk64.sys -- (wolfkr)
DRV:64bit: - [2014.11.02 12:43:00 | 000,310,984 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2014.11.01 17:52:44 | 000,042,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2014.07.17 21:36:53 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV:64bit: - [2014.07.16 15:46:32 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2014.07.16 15:43:34 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2013.10.07 07:17:38 | 000,014,888 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\hmd.sys -- (HMD)
DRV:64bit: - [2013.10.02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013.05.07 09:00:18 | 000,037,976 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System | Running] -- C:\Windows\SysNative\drivers\CFRMD.sys -- (CFRMD)
DRV:64bit: - [2013.02.12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2012.10.25 09:01:20 | 000,022,680 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.07 09:09:00 | 000,088,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2012.08.07 09:09:00 | 000,065,152 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2012.08.03 07:27:44 | 002,206,352 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2012.07.28 06:07:45 | 010,278,912 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.07.28 03:14:47 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.05.14 08:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.04.11 03:40:58 | 000,082,560 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2012.04.11 03:40:58 | 000,042,624 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2012.03.30 16:49:08 | 000,056,448 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2012.03.05 16:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.08.23 15:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.08 16:02:44 | 000,066,160 | ---- | M] (Giga-Byte Technology CO., LTD.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VirtDiskBus64.sys -- (VirtDiskBus)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.09.24 13:38:48 | 000,027,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (btnetBUs)
DRV:64bit: - [2009.09.24 05:40:14 | 000,023,304 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus)
DRV:64bit: - [2009.09.16 07:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
DRV:64bit: - [2009.08.26 11:16:52 | 000,030,344 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.18 19:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2014.07.17 19:55:35 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2013.10.02 06:10:39 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2013.10.02 05:59:46 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2012.09.24 01:54:02 | 000,057,512 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files (x86)\GIGABYTE\ET6\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2004.05.13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.05.13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\..\SearchScopes,DefaultScope = {8EEAC88A-079B-4b2c-80C1-7836F79EB40A}
IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IESR02
IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\..\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}: "URL" = http://us.search.yahoo.com/search?p={se ... chr-comodo
IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search?q={searchTerms}
IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
FF - prefs.js..extensions.trusted-ads.serp_about: "\"%2F*!%20serp-about%20-%20v0.1.10%20-%202014-04-07%2018%3A21%3A58%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0A%0Avar%20Util%20%3D%20%7B%0A%09debug%3A%20false%2C%0A%09extend%3A%20function(Child%2C%20Parent)%20%7B%0A%09%09var%20F%20%3D%20function()%20%7B%20%7D%3B%0A%09%09F.prototype%20%3D%20Parent.prototype%3B%0A%09%09Child.prototype%20%3D%20new%20F()%3B%0A%09%09Child.prototype.constructor%20%3D%20Child%3B%0A%09%09Child._super%20%3D%20Parent.prototype%3B%0A%09%7D%2C%0A%09log%3A%20function()%20%7B%0A%09%09if%20(Util.debug)%20%7B%0A%09%09%09var%20args%20%3D%20Array.prototype.slice.call(arguments)%3B%0A%09%09%09console.log.apply(console%2C%20args)%3B%0A%09%09%7D%0A%09%7D%0A%7D%3B%0A%2F%2Fshort%20alias%0Au%20%3D%20Util%3B%0A%0Afunction%20ENGINE%20()%20%7B%7D%0Afunction%20GoogleChrome%20()%20%7B%7D%0Afunction%20CORE()%20%7B%7D%0Afunction%20Firefox%20()%20%7B%7D%0Afunction%20IE%20()%20%7B%7D%0A%0AUtil.extend(ENGINE%2C%20CORE)%3B%0AUtil.extend(GoogleChrome%2C%20ENGINE)%3B%0AUtil.extend(Firefox%2C%20ENGINE)%3B%0AUtil.extend(IE%2C%20ENGINE)%3B%0D%0ACORE.prototype.ADS_HOST%20%3D%20document.location.protocol%2B%22%2F%2Fsearch.adtrustmedia.com%2Fsearch_safecontent.php%22%3B%0D%0A%0D%0ACORE.prototype.ALL_BLOCKS_SELECTOR%20%3D%20function()%7B%0D%0A%09return%20%7B%0D%0A%09%09orig%3A%20this.BLOCKS.TOP.origSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.origSel*%2F%2C%0D%0A%09%09cover%3A%20this.BLOCKS.TOP.coverSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.coverSel*%2F%0D%0A%09%7D%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.STYLES%20%3D%20%20function()%20%7B%0D%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0D%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20%7B%20%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%2304c%3B%20text-decoration%3Aunderline%3B%20font-size%3A17px%3B%7D%20%5C%0D%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23388222%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%7D%20%5C%0D%0A%09%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20visibility%3A%20hidden%3B%20overflow%3A%20hidden%3B%7D%20%5C%0D%0A%09.adtrCover-closeBtn%7B%20%5C%0D%0A%09%09cursor%3A%20pointer%3B%20%5C%0D%0A%09%09padding%3A%200%202px%202px%202px%3B%20%5C%0D%0A%09%09font-size%3A%2012px%3B%20%5C%0D%0A%09%09text-align%3A%20center%3B%20%5C%0D%0A%09%09position%3A%20absolute%3B%20%5C%0D%0A%09%09height%3A%2012px%3B%20%5C%0D%0A%09%09width%3A%2033px%3B%20%5C%0D%0A%09%09border%3A%201px%20solid%20lightblue%3B%20%5C%0D%0A%09%09background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0D%0A%09%09display%3A%20inline-block%3B%20%5C%0D%0A%09%09right%3A%201px%3B%20%5C%0D%0A%09%09top%3A%203px%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.adtrCover%20.closeAd%7B%20%5C%0D%0A%09%09text-decoration%3A%20underline%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0D%0A%09.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0D%0A%09.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0D%0A%09%3C%2Fstyle%3E%22%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.MENU_BTN_SPACE%20%3D%208%3B%0D%0ACORE.prototype.MIN_PADDING%20%3D%208%3B%0D%0A%0D%0ACORE.prototype._ads%20%3D%20%5B%5D%3B%0D%0ACORE.prototype.instanceId%20%3D%20''%3B%0D%0ACORE.prototype.affilateID%20%3D%20''%3B%0D%0ACORE.prototype.data%20%3D%20null%3B%0D%0ACORE.prototype.keyword%20%3D%20''%3B%0D%0ACORE.prototype.engineParams%20%3D%20%7B%7D%3B%0D%0ACORE.prototype.engineCode%20%3D%20''%3B%0D%0A%0D%0ACORE.prototype.start%20%3D%20function()%7B%7D%3B%0D%0A%0D%0ACORE.prototype.init%20%3D%20function(instanceId%2C%20affilateID%2C%20engineParams)%20%7B%0D%0A%09this.data%20%3D%20typeof(engineData)%20!%3D%20%22undefined%22%20%3F%20engineData%20%3A%20null%3B%0D%0A%09this.keyword%20%3D%20typeof(engineKeyword)%20!%3D%20%22undefined%22%20%3F%20engineKeyword%20%3A%20''%3B%0D%0A%0D%0A%09if(engineParams.delivPoint)%20%7B%20this.ADS_HOST%20%3D%20engineParams.delivPoint%3B%20%7D%0D%0A%0D%0A%09%24(%22head%22).append(this.coreStyles())%3B%0D%0A%09%24(%22head%22).append(this.STYLES())%3B%0D%0A%09this.instanceId%20%3D%20instanceId%3B%0D%0A%09this.affilateID%20%3D%20affilateID%3B%0D%0A%09this.engineParams%20%3D%20engineParams%3B%0D%0A%0D%0A%09this.suggModule%20%3D%20new%20this.SuggestionModule()%3B%0D%0A%09if(engineParams.suggConfig)%20%7B%0D%0A%09%09this.suggModule.setConfig(engineParams.suggConfig)%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09var%20currentKeyword%20%3D%20this.getCurrentKeyword().toLowerCase()%3B%0D%0A%0D%0A%09if(this.keyword)%7B%0D%0A%09%09this.keyword%20%3D%20decodeURIComponent(this.keyword)%3B%0D%0A%09%09this.keyword%20%3D%20this.keyword.replace(%2F%5C%2B%2Fg%2C%20'%20')%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09u.log('FROM%20PLUGIN%3A'%2C%20%7B'engineData'%3A%20this.data%2C%20'engineKeyword'%3A%20this.keyword%2C%20'currentKeyword'%3A%20currentKeyword%2C%20'engineParams'%3A%20engineParams%7D)%3B%0D%0A%0D%0A%09if%20(%20this.data%20%26%26%20(this.data%20!%3D%20'noPreload')%20%26%26%20(currentKeyword%20%3D%3D%20this.keyword)%20)%7B%0D%0A%09%09var%20suggAdData%20%3D%20this.suggModule.getAdsForKeyword(this.keyword)%3B%0D%0A%0D%0A%09%09this.data%20%3D%20suggAdData.concat(this.data)%3B%0D%0A%09%09u.log('suggAdData'%2C%20suggAdData%2C%20this.data)%3B%0D%0A%09%09if(%20this.data.length%20)%7B%0D%0A%09%09%09this.multipleTryToFindBlocks()%3B%20%2F%2Fchanged%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%20else%20%7B%0D%0A%09%09if(currentKeyword%20!%3D%20%22undefined%22)%20%7B%0D%0A%09%09%09this.keyword%20%3D%20currentKeyword%3B%0D%0A%09%09%09var%20requestUrl%20%3D%20this.getAdRequestUrl(currentKeyword)%3B%0D%0A%09%09%09this.sendAdRequest(requestUrl)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._domain_without_www%20%3D%20function(url)%20%7B%0D%0A%09var%20clean%20%3D%20url.replace(%2F%5Ewww%5C.%2F%2C'')%3B%0D%0A%09return%20clean%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getAdRequestUrl%20%3D%20function(keyword)%20%7B%0D%0A%09var%20domain%20%3D%20this._domain_without_www(document.location.host)%3B%0D%0A%09var%20requestUrl%20%3D%20this.ADS_HOST%20%2B%20%22%3F%22%20%2B%0D%0A%09%09%22adtype%3Dtext%22%20%2B%0D%0A%09%09%22%26method%3Djs%22%20%2B%0D%0A%09%09%22%26advert%3D1%22%20%2B%0D%0A%09%09%22%26referer%3D%22%20%2B%20encodeURIComponent(document.location.protocol%20%2B%22%2F%2F%22%2B%20document.location.host%2B%22%2F%22)%20%2B%0D%0A%09%09%22%26ta_affiliateid%3D%22%20%2B%20this.affilateID%20%2B%0D%0A%09%09%22%26ta_insid%3D%22%20%2B%20this.instanceId%20%2B%0D%0A%09%09%22%26kw%3D%22%20%2B%20encodeURIComponent(keyword)%20%2B%0D%0A%09%09this.getEngineIdentityParam()%3B%0D%0A%09return%20requestUrl%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getCurrentKeyword%20%3D%20function()%7B%0D%0A%09var%20keyword%20%3D%20''%3B%0D%0A%0D%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0D%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0D%0A%0D%0A%09if(spell.length)%7B%0D%0A%09%09keyword%20%3D%20spell.text()%3B%0D%0A%09%7D%20else%20if(input.length)%7B%0D%0A%09%09keyword%20%3D%20input.val()%3B%0D%0A%09%7D%0D%0A%09return%20keyword%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FTRY%20TO%20GET%20ADS%20BY%20NEW%20KEYWORD%0D%0A%2F%2F_requestInProcess%3A%20false%2C%0D%0ACORE.prototype.sendAdRequest%20%3D%20function(requestUrl)%20%7B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%0D%0A%09u.log('SEND%20REQUEST'%2C%20%5Bthis.keyword%2C%20requestUrl%5D)%3B%0D%0A%0D%0A%09%24.ajax(%7B%0D%0A%09%09url%3A%20requestUrl%2C%0D%0A%09%09dataType%3A%20'json'%2C%0D%0A%09%09error%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function()%20%7B%0D%0A%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%2C%0D%0A%09%09success%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function(data)%20%7B%0D%0A%09%09%09%09var%20suggAdData%20%3D%20scope.suggModule.getAdsForKeyword(scope.keyword)%3B%0D%0A%09%09%09%09data%20%3D%20suggAdData.concat(data)%3B%0D%0A%0D%0A%09%09%09%09if(!data.length)%20%7B%0D%0A%09%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%09%09return%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09u.log('REQUEST%20SUCCESS'%2C%20%5Bscope.keyword%2C%20scope.suggModule%2C%20data%5D)%3B%0D%0A%09%09%09%09scope.data%20%3D%20data%3B%0D%0A%09%09%09%09scope.clearDynamicBlocksData()%3B%0D%0A%09%09%09%09scope.makeCovers()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showAllOriginalAd%20%3D%20function()%20%7B%0D%0A%09u.log('showAllOriginalAd()')%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B').show()%3B%0D%0A%09if(block.adSel)%7B%0D%0A%09%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible!important%3B')%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FADS%20REPLACEMENT%20PROCESS%0D%0ACORE.prototype.makeCovers%20%3D%20function()%20%7B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%0D%0A%09%09if(!this.isAdExist(block))%20%7B%0D%0A%09%09%09if(this.isOfficialSiteBlock(block))%7B%0D%0A%09%09%09%09this.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%09continue%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09%2F%2FORIGINAL%20SELECTOR%20IS%20A%20DOM%20ELEMENT%0D%0A%09%09this._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09this.makeCover(block%2C%20blockName)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdExist%20%3D%20function(block)%20%7B%0D%0A%09var%20origSel%20%3D%20%24(block.origSel)%3B%0D%0A%09return%20origSel.length%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FPREPARE%20AND%20RENDER%20REPLACEMENT%20COVER%20(old%3A%20_prepareReplacement)%0D%0ACORE.prototype.makeCover%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('MAKE%20COVER'%2C%20blockName%2C%20%7BblockData%3A%20JSON.stringify(block.data)%7D)%3B%0D%0A%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(el.index('%23fakeAd')%20!%3D%20-1)%7B%0D%0A%09%09el%20%3D%20%24('%23fakeAd')%3B%0D%0A%09%7D%0D%0A%09var%20data%20%3D%20block.data%3B%0D%0A%0D%0A%09if%20(data.length)%20%7B%0D%0A%0D%0A%09%09var%20width%20%3D%20el.width()%3B%0D%0A%09%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%09%09%2F%2FREMOVE%20PREV%20BLOCK%0D%0A%09%09%24(block.coverSel).remove()%3B%0D%0A%0D%0A%09%09%2F%2FCREATE%20COVER%0D%0A%09%09var%20coverHeight%20%3D%20el.height()%3B%0D%0A%09%09if(block.newHeight)%7B%0D%0A%09%09%09coverHeight%20%3D%20block.newHeight%3B%0D%0A%09%09%09el.height(coverHeight)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09var%20cover%20%3D%20%24('%3Cdiv%20id%3D%22'%2B%20block.coverId%20%2B'%22%20class%3D%22adtrCover%22%20style%3D%22height%3A'%2B%20coverHeight%20%2B'px%3B%22%3E'%2B%20this._fillWithAds(block%2C%20blockName)%20%2B'%3C%2Fdiv%3E').css(%7B%0D%0A%09%09%09margin%3A%20this.getMargin(el)%2C%20padding%3A%20this.getPadding(el)%2C%0D%0A%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%7D)%3B%0D%0A%09%09cover.insertBefore(el)%3B%0D%0A%09%09el.addClass('hideOrig')%3B%0D%0A%09%09this.makeCoverMenu(block%2C%20cover%2C%20blockName)%3B%0D%0A%09%09this._compareRealAndCalcHeights(block)%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('showed%20without%20ad'%2C%20blockName)%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeCoverMenu%20%3D%20function(block%2C%20cover%2C%20blockName)%20%7B%0D%0A%20%20%20%20%20%20var%20clas%20%3D%20'atmAd'%3B%0D%0A%20%20%20%20%20%20var%20d%3B%0D%0A%0D%0A%20%20%20%20%20%20if%20(blockName%20%3D%3D%20'RIGHT')%20%7B%0D%0A%20%20%20%20%20%20%20%20clas%20%3D%20'atmAd-left'%3B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%3E%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%20else%20%7B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%3Cimg%20src%3D%22'%2Bdocument.location.protocol%2B'%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%20%2F%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FTABLE%0D%0A%20%20%20%20%20%20var%20t%20%3D%20%24(%22%3Ctable%20style%3D'visibility%3Ainherit%3B%20border-spacing%3A%201px%3B%20margin%3A%200px%3B%20border-collapse%3A%20collapse%3B%20%20background-color%3Agrey%3B%20z-index%3A100%3B'%20border%3D'1'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20style%3D'background-color%3Awhite%3B%20height%3A%2014px%3B%20padding%3A0px%203px%3B%20line-height%3A14px%3B'%3E%3Ca%20style%3D'width%3A58px%3B%20margin%3A0px%3B%20display%3Ablock%3B%20color%3Ablack%3B%20text-decoration%3Anone%3B%20text-align%3Aleft%3B%20font-weight%3Anormal%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20background-color%3Awhite%3B%20font-size%3A9px%3B'%20href%3D'https%3A%2F%2Fadtrustmedia.com%2Fwhyad.html'%20target%3D'_blank'%3EWhy%20this%20ad%3F%3C%2Fa%3E%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20class%3D'closeAd'%20style%3D'white-space%3Anowrap%3B%20color%3Ablack%3B%20background-color%3Awhite%3B%20cursor%3Apointer%3B%20padding%3A0px%203px%3B%20%20height%3A%2014px%3B%20line-height%3A14px%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A9px%3B'%3EClose%20this%20ad%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftable%3E%22)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20d.find('a.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20t.find('.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%20%20%20%20%20%20d.append(t)%3B%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FCLICK%20ON%20ATM%20AD%0D%0A%20%20%20%20%20%20d.find('.toggleTable').click(function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%24(this).next().toggle()%3B%0D%0A%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20d.appendTo(cover)%3B%0D%0A%0D%0A%20%20%20%20%20%20var%20self%20%3D%20this%3B%0D%0A%20%20%20%20%20%20function%20removeAd()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20cover.remove()%3B%0D%0A%20%20%20%20%20%20%20%20%20%20self.showOriginalAdForBlock(block)%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype._fillWithAds%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('FILL%20COVER'%2C%20blockName%2C%20%5Bblock.data%5D)%3B%0D%0A%09var%20block_content%20%3D%20''%2C%0D%0A%09%09data%20%3D%20block.data%3B%0D%0A%0D%0A%09block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09var%20adTopPadding%20%3D%20block.adTopPadding%3B%0D%0A%09%09if(i%3D%3D%3D0)%20%7B%0D%0A%09%09%09adTopPadding%20%3D%20adTopPadding%2F2%3B%0D%0A%09%09%09if(blockName%20%3D%3D%20'RIGHT')%20adTopPadding%20%2B%3D%20this.MENU_BTN_SPACE%3B%0D%0A%09%09%7D%0D%0A%09%09var%20offsiteClass%20%3D%20(data%5Bi%5D.origin%20%3D%3D%20%22suggestion%22)%20%3F%20'class%3D%22official-site%22'%20%3A%20%22%22%3B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20style%3D'padding-top%3A%20%22%2BadTopPadding%2B%22px'%22%20%2B%20offsiteClass%20%2B%20%22%3E%22%2B%0D%0A%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09return%20block_content%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._calcAdHeightForBlock%20%3D%20function(block)%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(!el.length)%20%7B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20width%20%3D%20el.width()%3B%0D%0A%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%0D%0A%09var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%20position%3Aabsolute%20!important%3B%20top%3A%20-10000px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%2F%2F%20var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%09%09%09).css(%7B%0D%0A%09%09%09%09%09margin%3A%20this.getMargin(el)%2C%0D%0A%09%09%09%09%09padding%3A%20this.getPadding(el)%20%2C%0D%0A%09%09%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%09%09%7D)%3B%0D%0A%0D%0A%0D%0A%09var%20block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%09var%20data%20%3D%20this.data%3B%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20data-index%3D'%22%2Bi%2B%22'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09div.html(block_content)%3B%0D%0A%09%24(this.MAIN_CONTAINER_SEL).append(div)%3B%0D%0A%0D%0A%09u.log('MAIN_CONTAINER_SEL'%2C%20%24(this.MAIN_CONTAINER_SEL).length)%3B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%09div.find('li').each(function(i%2C%20li)%7B%0D%0A%09%09li%20%3D%20%24(li)%3B%0D%0A%09%09var%20index%20%3D%20li.data('index')%3B%0D%0A%09%09if(!scope.data%5Bindex%5D.h)%20scope.data%5Bindex%5D.h%20%3D%20%7B%7D%3B%0D%0A%09%09scope.data%5Bindex%5D.h%5Bblock.origSel%5D%20%3D%20li.height()%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09%2F%2F%20div.remove()%3B%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._provideAdDataForBlock%20%3D%20function(block%2C%20blockName)%7B%0D%0A%09u.log('DATA%20FOR%20BLOCK'%2C%20blockName)%3B%0D%0A%0D%0A%09var%20addingLog%20%3D%20%5B%5D%3B%0D%0A%0D%0A%09var%20MAX_ADDITIONAL_PADDING%20%3D%2015%3B%0D%0A%0D%0A%09var%20providedIndexes%20%3D%20%5B%5D%3B%0D%0A%09var%20allData%20%3D%20this.data%3B%0D%0A%0D%0A%09var%20origEl%20%3D%20%24(block.origSel)%3B%0D%0A%09var%20blockHeight%20%3D%20origEl.height()%3B%0D%0A%09var%20adPadding%20%3D%20this.MIN_PADDING%3B%0D%0A%09var%20adHeightSumm%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'RIGHT')%20adHeightSumm%20%3D%20this.MENU_BTN_SPACE%3B%0D%0A%0D%0A%09this._calcAdHeightForBlock(block)%3B%0D%0A%0D%0A%09var%20indexesOfOtherBlocks%20%3D%20this._getDataIndexesOfOtherBlocks(block)%3B%0D%0A%0D%0A%09var%20allDataWasChecked%20%3D%20false%3B%0D%0A%09var%20i%20%3D%200%3B%0D%0A%09var%20numOfCheckedIndexes%20%3D%200%3B%0D%0A%0D%0A%09var%20maxOfAds%20%3D%20this.getMaxAdsForBlock(blockName)%3B%0D%0A%09var%20minOfAds%20%3D%20this.getMinAdsForBlock(blockName)%3B%0D%0A%0D%0A%09u.log('indexesOfOtherBlocks'%2C%20indexesOfOtherBlocks)%3B%0D%0A%09var%20numOfFreeIndexes%20%3D%20allData.length%20-%20indexesOfOtherBlocks.length%3B%0D%0A%09var%20ttt%20%3D%200%3B%0D%0A%09var%20adHeight%3B%0D%0A%09while(i%20%3C%20allData.length%20%26%26%20ttt%3C30%20%26%26%20providedIndexes.length%3CmaxOfAds)%7B%0D%0A%0D%0A%09%09var%20indexIsFree%20%3D%20(indexesOfOtherBlocks.indexOf(i)%20%3D%3D%20-1)%3B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09var%20anywayAd%20%3D%20this.isAdAnyway(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(indexIsFree%20%26%26%20acceptableAd)%7B%0D%0A%0D%0A%09%09%09adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%0D%0A%09%09%09%2F%2Fif%20we%20can%20fit%20ad%20to%20block%20then%20add%20it%0D%0A%09%09%09addingLog.push(%7B%0D%0A%09%09%09%09i%3A%20i%2C%0D%0A%09%09%09%09t%3A%20allData%5Bi%5D.t%2C%0D%0A%09%09%09%09free%3A%20(blockHeight-adHeightSumm)%2C%0D%0A%09%09%09%09adPad%3A%20(adHeight%2Bthis.MIN_PADDING)%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%09var%20enoughSpace%20%3D%20(blockHeight%20%3E%3D%20adHeightSumm%20%2B%20adHeight%20%2B%20adPadding)%3B%0D%0A%09%09%09if(enoughSpace%20%7C%7C%20providedIndexes.length%20%3C%20minOfAds%20%7C%7C%20anywayAd)%7B%0D%0A%09%09%09%09if(!enoughSpace)%7B%0D%0A%09%09%09%09%09u.log('add%20more%20ads%20couse%20min%20ads%20required%20in%20block'%2C%20blockName%2C%20providedIndexes.length)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09%09providedIndexes.push(i)%3B%0D%0A%09%09%09%7D%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09ttt%2B%2B%3B%0D%0A%09%09i%2B%2B%3B%0D%0A%09%7D%0D%0A%09u.log('addingLog'%2C%20addingLog)%3B%0D%0A%0D%0A%09var%20freeSpace%20%3D%20blockHeight%20-%20adHeightSumm%3B%0D%0A%09var%20additionalPadding%20%3D%20freeSpace%20%2F%20(providedIndexes.length)%3B%0D%0A%0D%0A%09u.log('blockHeight'%2C%20blockHeight%2C%20'adHeightSumm'%2C%20adHeightSumm%2C%20'freeSpace'%2C%20freeSpace)%3B%0D%0A%0D%0A%09u.log('additionalPadding'%2C%20additionalPadding%2C%20'acceptable'%2C%20(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200))%3B%0D%0A%09if(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09adPadding%20%2B%3D%20additionalPadding%3B%0D%0A%09%7D%20else%20if(providedIndexes.length%20%3C%20maxOfAds%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09var%20alreadyOccupiedAdIndexes%20%3D%20indexesOfOtherBlocks.concat(providedIndexes)%3B%0D%0A%09%09var%20shortestAdIndex%20%3D%20this._getShortestAdIndex(allData%2C%20alreadyOccupiedAdIndexes%2C%20block)%3B%0D%0A%09%09if(shortestAdIndex%20%3E%20-1)%7B%0D%0A%09%09%09adHeight%20%3D%20allData%5BshortestAdIndex%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09providedIndexes.push(shortestAdIndex)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09u.log('shortestAdIndex'%2C%20shortestAdIndex%2C%20'orig%20resize'%2C%20adHeightSumm%20-%20blockHeight)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('shortened%20block'%2C%20blockName%2C%20blockHeight%2C%20adHeightSumm)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20providedData%20%3D%20%5B%5D%3B%0D%0A%09for(var%20j%3D0%3B%20j%3CprovidedIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09providedData.push(allData%5BprovidedIndexes%5Bj%5D%5D)%3B%0D%0A%09%7D%0D%0A%09u.log('providedData'%2C%20providedData%2C%20'providedIndexes'%2C%20providedIndexes%2C%20'adPadding'%2C%20adPadding)%3B%0D%0A%09block.data%20%3D%20providedData%3B%0D%0A%09block.dataIndexes%20%3D%20providedIndexes%3B%0D%0A%09block.adTopPadding%20%3D%20adPadding%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getDataIndexesOfOtherBlocks%20%3D%20function(block)%7B%0D%0A%09var%20indexes%20%3D%20%5B%5D%3B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09if(this.BLOCKS%5Bi%5D.origSel%20!%3D%20block.origSel)%7B%0D%0A%09%09%09var%20otherBlockIndexes%20%3D%20this.BLOCKS%5Bi%5D.dataIndexes%3B%0D%0A%09%09%09for(var%20j%3D0%3B%20j%3CotherBlockIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09%09%09if(indexes.indexOf(otherBlockIndexes%5Bj%5D)%20%3D%3D%20-1)%7B%0D%0A%09%09%09%09%09indexes.push(otherBlockIndexes%5Bj%5D)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%09return%20indexes%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getShortestAdIndex%20%3D%20function(allData%2C%20excludedIndexes%2C%20block)%7B%0D%0A%09var%20minHeight%20%3D%201000000%3B%0D%0A%09var%20minHeightAdIndex%20%3D%20-1%3B%0D%0A%0D%0A%09for(var%20i%3D0%3B%20i%3CallData.length%3B%20i%2B%2B)%7B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(!acceptableAd)%20continue%3B%0D%0A%09%09if(excludedIndexes.indexOf(i)%20%3D%3D%20-1)%7B%0D%0A%09%09%09var%20adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09if(adHeight%20%3C%20minHeight)%7B%0D%0A%09%09%09%09minHeight%20%3D%20adHeight%3B%0D%0A%09%09%09%09minHeightAdIndex%20%3D%20i%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%09return%20minHeightAdIndex%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.clearDynamicBlocksData%20%3D%20function()%7B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5Bi%5D%3B%0D%0A%09%09block.data%20%3D%20%5B%5D%3B%0D%0A%09%09block.dataIndexes%20%3D%20%5B%5D%3B%0D%0A%09%09block.adTopPadding%20%3D%200%3B%0D%0A%09%09block.oldHeight%20%3D%20false%3B%0D%0A%09%09block.newHeight%20%3D%20false%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._replicateBlock%20%3D%20function(donor%2C%20recipient)%7B%0D%0A%09recipient.data%20%3D%20donor.data%3B%0D%0A%09recipient.dataIndexes%20%3D%20donor.dataIndexes%3B%0D%0A%09recipient.adTopPadding%20%3D%20donor.adTopPadding%3B%0D%0A%09recipient.oldHeight%20%3D%20%24(recipient.origSel).height()%3B%0D%0A%09recipient.newHeight%20%3D%20donor.newHeight%20%7C%7C%20%24(donor.origSel).height()%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._compareRealAndCalcHeights%20%3D%20function(block)%7B%0D%0A%09var%20cover%20%3D%20%24(block.coverSel)%3B%0D%0A%09var%20orig%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09cover.find('li').each(function(i)%7B%0D%0A%09%09var%20el%20%3D%20%24(this)%3B%0D%0A%09%09var%20title%20%3D%20el.find('h3%20a').text()%3B%0D%0A%09%09var%20calcSize%20%3D%20block.data%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09u.log(title%2C%20el.height()%2C%20calcSize)%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09u.log('block%20sizes'%2C%20%7B%0D%0A%09%09origReal%3A%20orig.height()%2C%0D%0A%09%09coverReal%3A%20cover.height()%2C%0D%0A%09%09newHeight%3A%20block.newHeight%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMaxAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20maxOfAds%20%3D%20100%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mxt)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mxr)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mxb)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.max_top_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.max_right_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.max_bottom_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20maxOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMinAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20minOfAds%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mnt)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mnr)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mnb)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.min_top_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.min_right_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.min_bottom_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20minOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.getPadding%20%3D%20function(el)%20%7B%0D%0A%09var%20right%20%3D%20el.css('padding-right')%2C%0D%0A%09%09left%20%3D%20el.css('padding-left')%3B%0D%0A%09return%20%5B0%2C%20right%2C%200%2C%20left%5D.join('%20')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMargin%20%3D%20function(el)%20%7B%0D%0A%09var%20margin%20%3D%20el.css('margin')%3B%0D%0A%09if(margin%20%3D%3D%3D%20'')%20%7B%0D%0A%09%09var%20top%20%3D%20el.css('margin-top')%2C%0D%0A%09%09%09right%20%3D%20el.css('margin-right')%2C%0D%0A%09%09%09bott%20%3D%20el.css('margin-bottom')%2C%0D%0A%09%09%09left%20%3D%20el.css('margin-left')%3B%0D%0A%09%09return%20%5Btop%2C%20right%2C%20bott%2C%20left%5D.join('%20')%3B%0D%0A%09%7D%0D%0A%09return%20margin%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getEngineIdentityParam%20%3D%20function()%20%7B%0D%0A%09return%20'%26e%3D'%2Bthis.engineCode%2B'_s'%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocksCycle%20%3D%20function(block%2C%20blockName%2C%20showOrigAd)%7B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09this.origAdCheckerCounter%5BblockName%5D%20%3D%200%3B%0D%0A%09this.origAdChecker%5BblockName%5D%20%3D%20setInterval(function()%7B%0D%0A%09%09if(self.isAdExist(block))%20%7B%0D%0A%09%09%09if(showOrigAd)%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7Delse%20if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09if(self.isOfficialSiteBlock(block))%7B%0D%0A%0D%0A%09%09%09%09self.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09self.origAdCheckerCounter%5BblockName%5D%2B%2B%3B%0D%0A%09%7D%2C%20100)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocks%20%3D%20function(showOrigAd)%20%7B%0D%0A%09this.origAdCheckerCounter%20%3D%20%7B%7D%3B%0D%0A%09this.origAdChecker%20%3D%20%7B%7D%3B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.multipleTryToFindBlocksCycle(block%2C%20blockName%2C%20showOrigAd)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FOfficial%20site%20feature%0D%0ACORE.prototype.isAdAcceptable%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20!(%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09%09)%20%7C%7C%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isElFake(%24(block.origSel))%0D%0A%09%09%09%09)%0D%0A%09%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdAnyway%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20(%0D%0A%09%09%09(%0D%0A%09%09%09%09this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09)%0D%0A%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteBlock%20%3D%20function(block)%7B%0D%0A%09return%20(block.name%20%3D%3D%20'TOP')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteAd%20%3D%20function(ad)%7B%0D%0A%09return%20(ad.origin%20%3D%3D%20%22suggestion%22)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeFakeOrigAd%20%3D%20function(block)%20%7B%0D%0A%09var%20parentEl%20%3D%20%24(block.parentSel)%3B%0D%0A%09if(!parentEl.length)%20%7B%0D%0A%09%09u.log('makeFakeOrigAd%20!parentEl.length')%3B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%09var%20origId%20%3D%20block.origSel.replace('%23'%2C%20'')%3B%0D%0A%09var%20fakeEl%20%3D%20%24('%3Cdiv%20id%3D%22fakeAd%22%3E')%3B%0D%0A%09parentEl.prepend(fakeEl)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isElFake%20%3D%20function(el)%7B%0D%0A%09return%20(el.index('%23fakeAd')%20!%3D%20-1)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.SuggestionModule%20%20%3D%20function(instanceId)%20%7B%0D%0A%09this.data%20%3D%20%7B%7D%3B%0D%0A%09this.enable%20%3D%20true%3B%0D%0A%09this.addedBookmarks%20%3D%20%7B%7D%3B%0D%0A%0D%0A%09this.setConfig%20%3D%20function(data)%7B%0D%0A%09%09this.data%20%3D%20data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getConfig%20%3D%20function()%7B%0D%0A%09%09return%20this.data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getAdsForKeyword%20%3D%20function(keyword)%7B%0D%0A%09%09if(!this.data%20%7C%7C%20!this.data.s)%20return%20%5B%5D%3B%0D%0A%09%09var%20suggestions%20%3D%20this.findSuggestionsForKeyword(keyword%2C%2010)%3B%0D%0A%09%09return%20this.generateAdData(suggestions)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.findSuggestionsForKeyword%20%3D%20function(keyword%2C%20maxAmount)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Cthis.data.s.length%20%26%26%20result.length%20%3C%3D%20maxAmount%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20this.data.s%5Bi%5D%3B%0D%0A%09%09%09if(this.isSuggestionMatched(sugg%2C%20keyword))%7B%0D%0A%09%09%09%09result.push(sugg)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.isSuggestionMatched%20%3D%20function(sugg%2C%20keyword)%7B%0D%0A%09%09keyword%20%3D%20keyword.toLowerCase()%3B%0D%0A%09%09var%20k%20%3D%20keyword.indexOf(sugg.k.toLowerCase())%20%3D%3D%3D%200%3B%0D%0A%09%09var%20s%20%3D%20sugg.s.toLowerCase().indexOf(keyword)%20%3D%3D%3D%200%3B%0D%0A%09%09return%20k%20%26%26%20s%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.generateAdData%20%3D%20function(suggestions)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Csuggestions.length%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20suggestions%5Bi%5D%3B%0D%0A%09%09%09var%20diplayUrl%20%3D%20(sugg.v)%20%3F%20sugg.v%20%3A%20sugg.u.replace(%2F.*%5C%2F%5C%2F(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%241')%3B%20%2F%2Fwww.sales.target.com%0D%0A%09%09%09var%20title%20%3D%20(sugg.t)%20%3F%20sugg.t%20%3A%20this.capitaliseFirstLetter(sugg.u.replace(%2F.*%5C%2F%5C%2F(www%5C.)%3F(%5B%5Cw.%5D%2B)%5C.(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%242'))%3B%20%2F%2FSales.target%0D%0A%0D%0A%09%09%09result.push(%7B%0D%0A%09%09%09%09%22t%22%3A%20title%2C%0D%0A%09%09%09%09%22c%22%3A%20sugg.u%2C%0D%0A%09%09%09%09%22u%22%3A%20diplayUrl%20%2B%20'%20-%20'%20%2B%20this.data.t%2C%0D%0A%09%09%09%09%22d%22%3A%20sugg.d%2C%0D%0A%09%09%09%09%22r%22%3A%201%2C%0D%0A%09%09%09%09%22origin%22%3A%20%22suggestion%22%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.capitaliseFirstLetter%20%3D%20function(string)%7B%0D%0A%09%09return%20string.charAt(0).toUpperCase()%20%2B%20string.slice(1)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.coreStyles%20%20%3D%20function()%20%7B%0D%0A%09var%20a%20%3D%20'%3Cstyle%20id%3D%22adtrCoreStyle%22%3E%5C%0D%0A%09%3C%2Fstyle%3E'%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0AENGINE.prototype.BLOCKS%20%3D%20%7B%0A%09%09'TOP'%3A%20%7B%0A%09%09%09origSel%3A%20'%23ad1%2C%20.gB%3Aeq(0)'%2C%0A%09%09%09coverSel%3A%20'%23gB5_top_atmcover'%2C%0A%09%09%09name%3A%20'TOP'%2C%0A%09%09%09coverId%3A%20'gB5_top_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23ad1%20iframe%2C%20.gB%3Aeq(0)'%0A%09%09%7D%2C%0A%0A%09%09'BOTTOM'%3A%20%7B%0A%09%09%09origSel%3A%20'%23ad2%2C%20.gB%3Aeq(1)'%2C%0A%09%09%09coverSel%3A%20'%23gB5_bot_atmcover'%2C%0A%09%09%09name%3A%20'BOTTOM'%2C%0A%09%09%09coverId%3A%20'gB5_bot_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23ad2%20iframe%2C%20.gB%3Aeq(1)'%0A%09%09%7D%0A%0A%7D%3B%0A%0A%0AENGINE.prototype.INPUT_SEL%20%3D%20'%23sv'%3B%0AENGINE.prototype.SPELL_SEL%20%3D%20'%23spell%20a%20b'%3B%0AENGINE.prototype.MAIN_CONTAINER_SEL%20%3D%20'%23abc'%3B%0AENGINE.prototype.engineCode%20%3D%20'a'%3B%0A%0AENGINE.prototype.STYLES%20%3D%20%20function()%7B%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%7D%20%5C%0A%09.adtrCover%20ol%20%7B%20margin-left%3A%204px%3B%20%7D%20%5C%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%200px%3B%20list-style-type%3A%20none%20!important%3B%20margin-left%3A%200px%20!important%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%200px%3B%7D%20%5C%0A%09%23tt21%20.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A16px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%2336C%3B%20text-decoration%3Aunderline%3B%20font-weight%3A%20normal%3B%7D%20%5C%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23999%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%20font-style%3A%20inherit%3B%7D%20%5C%0A%20%20%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20%5C%0A%20%20%20%20visibility%3A%20hidden%3B%20%5C%0A%20%20%20%20overflow%3A%20hidden%3B%20%5C%0A%20%20%7D%20%5C%0A%20%20.adtrCover-closeBtn%7B%20%5C%0A%20%20%20%20cursor%3A%20pointer%3B%20%5C%0A%20%20%20%20padding%3A%200%202px%202px%202px%3B%20%5C%0A%20%20%20%20font-size%3A%2012px%3B%20%5C%0A%20%20%20%20text-align%3A%20center%3B%20%5C%0A%20%20%20%20position%3A%20absolute%3B%20%5C%0A%20%20%20%20height%3A%2012px%3B%20%5C%0A%20%20%20%20width%3A%2033px%3B%20%5C%0A%20%20%20%20border%3A%201px%20solid%20lightblue%3B%20%5C%0A%20%20%20%20background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0A%20%20%20%20display%3A%20inline-block%3B%20%5C%0A%20%20%20%20right%3A%201px%3B%20%5C%0A%20%20%20%20top%3A%203px%3B%20%5C%0A%20%20%7D%5C%0A%20%20.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0A%20%20.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%20top%3A%20-99999px%3B%7D%20%5C%0A%20%20.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0A%20%20%3C%2Fstyle%3E%22%3B%0A%20%20return%20a%3B%0A%7D%3B%0A%0AENGINE.prototype.getCurrentKeyword%20%3D%20function()%7B%0A%09var%20keyword%20%3D%20''%3B%0A%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0A%09var%20url%20%3D%20document.location.href%3B%0A%09var%20match%20%3D%20url.match(%2F%5B%5C%23%7C%5C%3F%7C%5C%26%5Dq%3D(%5B%5E%26%5D*)%2F)%3B%0A%0A%09u.log(match)%3B%0A%09if(%2F%5C%2Fr%5C.htm%2F.test(url)%20%26%26%20match%20%26%26%20match.length%20%3E%200)%7B%0A%09%09%2F%2Fif%20it%20was%20related%20link%20used%0A%09%09keyword%20%3D%20match%5B1%5D%3B%0A%09%7D%20else%20%7B%0A%09%09%2F%2Fif%20normal%20search%20made%0A%09%09if(spell.length)%7B%0A%09%09%09keyword%20%3D%20spell.text()%3B%0A%09%09%7D%20else%20if(input.length)%7B%0A%09%09%09keyword%20%3D%20input.val()%3B%0A%09%09%7D%0A%09%7D%0A%09return%20keyword%3B%0A%7D%3B%0A%0AENGINE.prototype.isAdExist%20%3D%20function(block)%20%7B%0A%09var%20origIFrame%20%3D%20%24(block.adSel)%3B%0A%09return%20origIFrame.length%20%26%26%20(origIFrame.height()%20%3E%200)%3B%0A%0A%7D%3B%0A%0AENGINE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0A%09if(!el.length)%20return%3B%0A%09el.removeClass('hideOrig')%3B%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0A%7D%3B%0D%0A%0D%0A%0D%0AGoogleChrome.prototype.ff%20%3D%20function()%7B%0D%0A%09console.log('oogleChrome.prototype.ff')%3B%0D%0A%7D%3B%0D%0AFirefox.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09%24('.adtr').remove()%3B%0D%0A%7D%3B%0D%0Afunction%20IE%20()%20%7B%7D%0D%0Afunction%20Browser%20(affiliateID%2C%20instanceID)%20%7B%0A%09var%20browser%3B%0A%09%2F%2Fif%20called%20with%20a%20%22new%22%20keyword%0A%09if%20(this.constructor%20%3D%3D%20Browser)%20%7B%0A%09%09%2F%2Fpicking%20specific%20browser%0A%09%09browser%20%3D%20this.pickBrowser()%3B%0A%0A%09%09browser.affiliateID%20%3D%20affiliateID%3B%0A%09%09browser.instanceID%20%3D%20instanceID%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error(%22Browser%20is%20a%20constructor%20function%22)%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%0A%0ABrowser.prototype.pickBrowser%20%3D%20function()%20%7B%0A%09%2F%2Fchecking%20browser%0A%09var%20ischrome%20%3D%20typeof(chrome)%20%3D%3D%20'object'%2C%0A%09%09firefox%20%3D%20typeof(chrome)%20%3D%3D%20'string'%2C%0A%09%09ie%20%3D%20navigator.userAgent.indexOf(%22Trident%22)%20!%3D%3D%20-1%2C%0A%09%09browser%20%3D%20null%3B%0A%0A%09if%20(ischrome)%20%7B%0A%09%09browser%20%3D%20new%20GoogleChrome()%3B%0A%09%7D%20else%20if%20(firefox)%20%7B%0A%09%09browser%20%3D%20new%20Firefox()%3B%0A%09%7D%20else%20if%20(ie)%20%7B%0A%09%09browser%20%3D%20new%20IE()%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error('unknown%20browser')%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%3B%0A%0A%0A%0D%0A%2F%2Fsimply%20extending%20specific%20browser%20classes%20with%20basic%20class%2C%20which%20holds%20default%20browser%20methods%0A%0A%2F%2Freturns%20browser%20object%20(one%20of%20Chrome%2C%20FF%2C%20IE)%0A%0Aif(typeof(pc)%20!%3D%20'undefined')%7B%0A%09var%20affiliateID%20%3D%20pc.affiliateID%3B%0A%09var%20instanceID%20%3D%20pc.instanceId%3B%0A%09var%20engineParams%20%3D%20pc.engineParams%3B%0A%7D%0A%0Aif(%20typeof(affiliateID)%20!%3D%20'undefined'%20)%7B%0A%09%2F%2FaffiliateID%20predefined%20by%20extension%0A%09var%20browser%20%3D%20new%20Browser(affiliateID%2C%20instanceID)%3B%0A%09browser.init(instanceID%2C%20affiliateID%2C%20engineParams)%3B%0A%09Util.log('started%20browser'%2C%20affiliateID%2C%20instanceID)%3B%0A%7D%20else%20%7B%0A%09var%20browser%20%3D%20new%20Browser()%3B%0A%09var%20Engine%20%3D%20browser%3B%0A%09Util.log('prepare%20Engine')%3B%0A%7D%0A%0A%0A%0A\""
FF - prefs.js..extensions.trusted-ads.serp_ask: "\"%2F*!%20serp-ask%20-%20v0.1.8%20-%202014-04-07%2018%3A21%3A58%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0A%0Avar%20Util%20%3D%20%7B%0A%09debug%3A%20false%2C%0A%09extend%3A%20function(Child%2C%20Parent)%20%7B%0A%09%09var%20F%20%3D%20function()%20%7B%20%7D%3B%0A%09%09F.prototype%20%3D%20Parent.prototype%3B%0A%09%09Child.prototype%20%3D%20new%20F()%3B%0A%09%09Child.prototype.constructor%20%3D%20Child%3B%0A%09%09Child._super%20%3D%20Parent.prototype%3B%0A%09%7D%2C%0A%09log%3A%20function()%20%7B%0A%09%09if%20(Util.debug)%20%7B%0A%09%09%09var%20args%20%3D%20Array.prototype.slice.call(arguments)%3B%0A%09%09%09console.log.apply(console%2C%20args)%3B%0A%09%09%7D%0A%09%7D%0A%7D%3B%0A%2F%2Fshort%20alias%0Au%20%3D%20Util%3B%0A%0Afunction%20ENGINE%20()%20%7B%7D%0Afunction%20GoogleChrome%20()%20%7B%7D%0Afunction%20CORE()%20%7B%7D%0Afunction%20Firefox%20()%20%7B%7D%0Afunction%20IE%20()%20%7B%7D%0A%0AUtil.extend(ENGINE%2C%20CORE)%3B%0AUtil.extend(GoogleChrome%2C%20ENGINE)%3B%0AUtil.extend(Firefox%2C%20ENGINE)%3B%0AUtil.extend(IE%2C%20ENGINE)%3B%0D%0ACORE.prototype.ADS_HOST%20%3D%20document.location.protocol%2B%22%2F%2Fsearch.adtrustmedia.com%2Fsearch_safecontent.php%22%3B%0D%0A%0D%0ACORE.prototype.ALL_BLOCKS_SELECTOR%20%3D%20function()%7B%0D%0A%09return%20%7B%0D%0A%09%09orig%3A%20this.BLOCKS.TOP.origSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.origSel*%2F%2C%0D%0A%09%09cover%3A%20this.BLOCKS.TOP.coverSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.coverSel*%2F%0D%0A%09%7D%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.STYLES%20%3D%20%20function()%20%7B%0D%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0D%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20%7B%20%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%2304c%3B%20text-decoration%3Aunderline%3B%20font-size%3A17px%3B%7D%20%5C%0D%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23388222%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%7D%20%5C%0D%0A%09%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20visibility%3A%20hidden%3B%20overflow%3A%20hidden%3B%7D%20%5C%0D%0A%09.adtrCover-closeBtn%7B%20%5C%0D%0A%09%09cursor%3A%20pointer%3B%20%5C%0D%0A%09%09padding%3A%200%202px%202px%202px%3B%20%5C%0D%0A%09%09font-size%3A%2012px%3B%20%5C%0D%0A%09%09text-align%3A%20center%3B%20%5C%0D%0A%09%09position%3A%20absolute%3B%20%5C%0D%0A%09%09height%3A%2012px%3B%20%5C%0D%0A%09%09width%3A%2033px%3B%20%5C%0D%0A%09%09border%3A%201px%20solid%20lightblue%3B%20%5C%0D%0A%09%09background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0D%0A%09%09display%3A%20inline-block%3B%20%5C%0D%0A%09%09right%3A%201px%3B%20%5C%0D%0A%09%09top%3A%203px%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.adtrCover%20.closeAd%7B%20%5C%0D%0A%09%09text-decoration%3A%20underline%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0D%0A%09.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0D%0A%09.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0D%0A%09%3C%2Fstyle%3E%22%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.MENU_BTN_SPACE%20%3D%208%3B%0D%0ACORE.prototype.MIN_PADDING%20%3D%208%3B%0D%0A%0D%0ACORE.prototype._ads%20%3D%20%5B%5D%3B%0D%0ACORE.prototype.instanceId%20%3D%20''%3B%0D%0ACORE.prototype.affilateID%20%3D%20''%3B%0D%0ACORE.prototype.data%20%3D%20null%3B%0D%0ACORE.prototype.keyword%20%3D%20''%3B%0D%0ACORE.prototype.engineParams%20%3D%20%7B%7D%3B%0D%0ACORE.prototype.engineCode%20%3D%20''%3B%0D%0A%0D%0ACORE.prototype.start%20%3D%20function()%7B%7D%3B%0D%0A%0D%0ACORE.prototype.init%20%3D%20function(instanceId%2C%20affilateID%2C%20engineParams)%20%7B%0D%0A%09this.data%20%3D%20typeof(engineData)%20!%3D%20%22undefined%22%20%3F%20engineData%20%3A%20null%3B%0D%0A%09this.keyword%20%3D%20typeof(engineKeyword)%20!%3D%20%22undefined%22%20%3F%20engineKeyword%20%3A%20''%3B%0D%0A%0D%0A%09if(engineParams.delivPoint)%20%7B%20this.ADS_HOST%20%3D%20engineParams.delivPoint%3B%20%7D%0D%0A%0D%0A%09%24(%22head%22).append(this.coreStyles())%3B%0D%0A%09%24(%22head%22).append(this.STYLES())%3B%0D%0A%09this.instanceId%20%3D%20instanceId%3B%0D%0A%09this.affilateID%20%3D%20affilateID%3B%0D%0A%09this.engineParams%20%3D%20engineParams%3B%0D%0A%0D%0A%09this.suggModule%20%3D%20new%20this.SuggestionModule()%3B%0D%0A%09if(engineParams.suggConfig)%20%7B%0D%0A%09%09this.suggModule.setConfig(engineParams.suggConfig)%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09var%20currentKeyword%20%3D%20this.getCurrentKeyword().toLowerCase()%3B%0D%0A%0D%0A%09if(this.keyword)%7B%0D%0A%09%09this.keyword%20%3D%20decodeURIComponent(this.keyword)%3B%0D%0A%09%09this.keyword%20%3D%20this.keyword.replace(%2F%5C%2B%2Fg%2C%20'%20')%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09u.log('FROM%20PLUGIN%3A'%2C%20%7B'engineData'%3A%20this.data%2C%20'engineKeyword'%3A%20this.keyword%2C%20'currentKeyword'%3A%20currentKeyword%2C%20'engineParams'%3A%20engineParams%7D)%3B%0D%0A%0D%0A%09if%20(%20this.data%20%26%26%20(this.data%20!%3D%20'noPreload')%20%26%26%20(currentKeyword%20%3D%3D%20this.keyword)%20)%7B%0D%0A%09%09var%20suggAdData%20%3D%20this.suggModule.getAdsForKeyword(this.keyword)%3B%0D%0A%0D%0A%09%09this.data%20%3D%20suggAdData.concat(this.data)%3B%0D%0A%09%09u.log('suggAdData'%2C%20suggAdData%2C%20this.data)%3B%0D%0A%09%09if(%20this.data.length%20)%7B%0D%0A%09%09%09this.multipleTryToFindBlocks()%3B%20%2F%2Fchanged%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%20else%20%7B%0D%0A%09%09if(currentKeyword%20!%3D%20%22undefined%22)%20%7B%0D%0A%09%09%09this.keyword%20%3D%20currentKeyword%3B%0D%0A%09%09%09var%20requestUrl%20%3D%20this.getAdRequestUrl(currentKeyword)%3B%0D%0A%09%09%09this.sendAdRequest(requestUrl)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._domain_without_www%20%3D%20function(url)%20%7B%0D%0A%09var%20clean%20%3D%20url.replace(%2F%5Ewww%5C.%2F%2C'')%3B%0D%0A%09return%20clean%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getAdRequestUrl%20%3D%20function(keyword)%20%7B%0D%0A%09var%20domain%20%3D%20this._domain_without_www(document.location.host)%3B%0D%0A%09var%20requestUrl%20%3D%20this.ADS_HOST%20%2B%20%22%3F%22%20%2B%0D%0A%09%09%22adtype%3Dtext%22%20%2B%0D%0A%09%09%22%26method%3Djs%22%20%2B%0D%0A%09%09%22%26advert%3D1%22%20%2B%0D%0A%09%09%22%26referer%3D%22%20%2B%20encodeURIComponent(document.location.protocol%20%2B%22%2F%2F%22%2B%20document.location.host%2B%22%2F%22)%20%2B%0D%0A%09%09%22%26ta_affiliateid%3D%22%20%2B%20this.affilateID%20%2B%0D%0A%09%09%22%26ta_insid%3D%22%20%2B%20this.instanceId%20%2B%0D%0A%09%09%22%26kw%3D%22%20%2B%20encodeURIComponent(keyword)%20%2B%0D%0A%09%09this.getEngineIdentityParam()%3B%0D%0A%09return%20requestUrl%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getCurrentKeyword%20%3D%20function()%7B%0D%0A%09var%20keyword%20%3D%20''%3B%0D%0A%0D%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0D%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0D%0A%0D%0A%09if(spell.length)%7B%0D%0A%09%09keyword%20%3D%20spell.text()%3B%0D%0A%09%7D%20else%20if(input.length)%7B%0D%0A%09%09keyword%20%3D%20input.val()%3B%0D%0A%09%7D%0D%0A%09return%20keyword%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FTRY%20TO%20GET%20ADS%20BY%20NEW%20KEYWORD%0D%0A%2F%2F_requestInProcess%3A%20false%2C%0D%0ACORE.prototype.sendAdRequest%20%3D%20function(requestUrl)%20%7B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%0D%0A%09u.log('SEND%20REQUEST'%2C%20%5Bthis.keyword%2C%20requestUrl%5D)%3B%0D%0A%0D%0A%09%24.ajax(%7B%0D%0A%09%09url%3A%20requestUrl%2C%0D%0A%09%09dataType%3A%20'json'%2C%0D%0A%09%09error%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function()%20%7B%0D%0A%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%2C%0D%0A%09%09success%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function(data)%20%7B%0D%0A%09%09%09%09var%20suggAdData%20%3D%20scope.suggModule.getAdsForKeyword(scope.keyword)%3B%0D%0A%09%09%09%09data%20%3D%20suggAdData.concat(data)%3B%0D%0A%0D%0A%09%09%09%09if(!data.length)%20%7B%0D%0A%09%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%09%09return%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09u.log('REQUEST%20SUCCESS'%2C%20%5Bscope.keyword%2C%20scope.suggModule%2C%20data%5D)%3B%0D%0A%09%09%09%09scope.data%20%3D%20data%3B%0D%0A%09%09%09%09scope.clearDynamicBlocksData()%3B%0D%0A%09%09%09%09scope.makeCovers()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showAllOriginalAd%20%3D%20function()%20%7B%0D%0A%09u.log('showAllOriginalAd()')%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B').show()%3B%0D%0A%09if(block.adSel)%7B%0D%0A%09%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible!important%3B')%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FADS%20REPLACEMENT%20PROCESS%0D%0ACORE.prototype.makeCovers%20%3D%20function()%20%7B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%0D%0A%09%09if(!this.isAdExist(block))%20%7B%0D%0A%09%09%09if(this.isOfficialSiteBlock(block))%7B%0D%0A%09%09%09%09this.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%09continue%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09%2F%2FORIGINAL%20SELECTOR%20IS%20A%20DOM%20ELEMENT%0D%0A%09%09this._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09this.makeCover(block%2C%20blockName)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdExist%20%3D%20function(block)%20%7B%0D%0A%09var%20origSel%20%3D%20%24(block.origSel)%3B%0D%0A%09return%20origSel.length%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FPREPARE%20AND%20RENDER%20REPLACEMENT%20COVER%20(old%3A%20_prepareReplacement)%0D%0ACORE.prototype.makeCover%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('MAKE%20COVER'%2C%20blockName%2C%20%7BblockData%3A%20JSON.stringify(block.data)%7D)%3B%0D%0A%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(el.index('%23fakeAd')%20!%3D%20-1)%7B%0D%0A%09%09el%20%3D%20%24('%23fakeAd')%3B%0D%0A%09%7D%0D%0A%09var%20data%20%3D%20block.data%3B%0D%0A%0D%0A%09if%20(data.length)%20%7B%0D%0A%0D%0A%09%09var%20width%20%3D%20el.width()%3B%0D%0A%09%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%09%09%2F%2FREMOVE%20PREV%20BLOCK%0D%0A%09%09%24(block.coverSel).remove()%3B%0D%0A%0D%0A%09%09%2F%2FCREATE%20COVER%0D%0A%09%09var%20coverHeight%20%3D%20el.height()%3B%0D%0A%09%09if(block.newHeight)%7B%0D%0A%09%09%09coverHeight%20%3D%20block.newHeight%3B%0D%0A%09%09%09el.height(coverHeight)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09var%20cover%20%3D%20%24('%3Cdiv%20id%3D%22'%2B%20block.coverId%20%2B'%22%20class%3D%22adtrCover%22%20style%3D%22height%3A'%2B%20coverHeight%20%2B'px%3B%22%3E'%2B%20this._fillWithAds(block%2C%20blockName)%20%2B'%3C%2Fdiv%3E').css(%7B%0D%0A%09%09%09margin%3A%20this.getMargin(el)%2C%20padding%3A%20this.getPadding(el)%2C%0D%0A%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%7D)%3B%0D%0A%09%09cover.insertBefore(el)%3B%0D%0A%09%09el.addClass('hideOrig')%3B%0D%0A%09%09this.makeCoverMenu(block%2C%20cover%2C%20blockName)%3B%0D%0A%09%09this._compareRealAndCalcHeights(block)%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('showed%20without%20ad'%2C%20blockName)%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeCoverMenu%20%3D%20function(block%2C%20cover%2C%20blockName)%20%7B%0D%0A%20%20%20%20%20%20var%20clas%20%3D%20'atmAd'%3B%0D%0A%20%20%20%20%20%20var%20d%3B%0D%0A%0D%0A%20%20%20%20%20%20if%20(blockName%20%3D%3D%20'RIGHT')%20%7B%0D%0A%20%20%20%20%20%20%20%20clas%20%3D%20'atmAd-left'%3B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%3E%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%20else%20%7B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%3Cimg%20src%3D%22'%2Bdocument.location.protocol%2B'%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%20%2F%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FTABLE%0D%0A%20%20%20%20%20%20var%20t%20%3D%20%24(%22%3Ctable%20style%3D'visibility%3Ainherit%3B%20border-spacing%3A%201px%3B%20margin%3A%200px%3B%20border-collapse%3A%20collapse%3B%20%20background-color%3Agrey%3B%20z-index%3A100%3B'%20border%3D'1'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20style%3D'background-color%3Awhite%3B%20height%3A%2014px%3B%20padding%3A0px%203px%3B%20line-height%3A14px%3B'%3E%3Ca%20style%3D'width%3A58px%3B%20margin%3A0px%3B%20display%3Ablock%3B%20color%3Ablack%3B%20text-decoration%3Anone%3B%20text-align%3Aleft%3B%20font-weight%3Anormal%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20background-color%3Awhite%3B%20font-size%3A9px%3B'%20href%3D'https%3A%2F%2Fadtrustmedia.com%2Fwhyad.html'%20target%3D'_blank'%3EWhy%20this%20ad%3F%3C%2Fa%3E%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20class%3D'closeAd'%20style%3D'white-space%3Anowrap%3B%20color%3Ablack%3B%20background-color%3Awhite%3B%20cursor%3Apointer%3B%20padding%3A0px%203px%3B%20%20height%3A%2014px%3B%20line-height%3A14px%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A9px%3B'%3EClose%20this%20ad%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftable%3E%22)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20d.find('a.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20t.find('.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%20%20%20%20%20%20d.append(t)%3B%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FCLICK%20ON%20ATM%20AD%0D%0A%20%20%20%20%20%20d.find('.toggleTable').click(function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%24(this).next().toggle()%3B%0D%0A%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20d.appendTo(cover)%3B%0D%0A%0D%0A%20%20%20%20%20%20var%20self%20%3D%20this%3B%0D%0A%20%20%20%20%20%20function%20removeAd()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20cover.remove()%3B%0D%0A%20%20%20%20%20%20%20%20%20%20self.showOriginalAdForBlock(block)%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype._fillWithAds%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('FILL%20COVER'%2C%20blockName%2C%20%5Bblock.data%5D)%3B%0D%0A%09var%20block_content%20%3D%20''%2C%0D%0A%09%09data%20%3D%20block.data%3B%0D%0A%0D%0A%09block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09var%20adTopPadding%20%3D%20block.adTopPadding%3B%0D%0A%09%09if(i%3D%3D%3D0)%20%7B%0D%0A%09%09%09adTopPadding%20%3D%20adTopPadding%2F2%3B%0D%0A%09%09%09if(blockName%20%3D%3D%20'RIGHT')%20adTopPadding%20%2B%3D%20this.MENU_BTN_SPACE%3B%0D%0A%09%09%7D%0D%0A%09%09var%20offsiteClass%20%3D%20(data%5Bi%5D.origin%20%3D%3D%20%22suggestion%22)%20%3F%20'class%3D%22official-site%22'%20%3A%20%22%22%3B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20style%3D'padding-top%3A%20%22%2BadTopPadding%2B%22px'%22%20%2B%20offsiteClass%20%2B%20%22%3E%22%2B%0D%0A%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09return%20block_content%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._calcAdHeightForBlock%20%3D%20function(block)%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(!el.length)%20%7B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20width%20%3D%20el.width()%3B%0D%0A%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%0D%0A%09var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%20position%3Aabsolute%20!important%3B%20top%3A%20-10000px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%2F%2F%20var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%09%09%09).css(%7B%0D%0A%09%09%09%09%09margin%3A%20this.getMargin(el)%2C%0D%0A%09%09%09%09%09padding%3A%20this.getPadding(el)%20%2C%0D%0A%09%09%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%09%09%7D)%3B%0D%0A%0D%0A%0D%0A%09var%20block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%09var%20data%20%3D%20this.data%3B%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20data-index%3D'%22%2Bi%2B%22'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09div.html(block_content)%3B%0D%0A%09%24(this.MAIN_CONTAINER_SEL).append(div)%3B%0D%0A%0D%0A%09u.log('MAIN_CONTAINER_SEL'%2C%20%24(this.MAIN_CONTAINER_SEL).length)%3B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%09div.find('li').each(function(i%2C%20li)%7B%0D%0A%09%09li%20%3D%20%24(li)%3B%0D%0A%09%09var%20index%20%3D%20li.data('index')%3B%0D%0A%09%09if(!scope.data%5Bindex%5D.h)%20scope.data%5Bindex%5D.h%20%3D%20%7B%7D%3B%0D%0A%09%09scope.data%5Bindex%5D.h%5Bblock.origSel%5D%20%3D%20li.height()%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09%2F%2F%20div.remove()%3B%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._provideAdDataForBlock%20%3D%20function(block%2C%20blockName)%7B%0D%0A%09u.log('DATA%20FOR%20BLOCK'%2C%20blockName)%3B%0D%0A%0D%0A%09var%20addingLog%20%3D%20%5B%5D%3B%0D%0A%0D%0A%09var%20MAX_ADDITIONAL_PADDING%20%3D%2015%3B%0D%0A%0D%0A%09var%20providedIndexes%20%3D%20%5B%5D%3B%0D%0A%09var%20allData%20%3D%20this.data%3B%0D%0A%0D%0A%09var%20origEl%20%3D%20%24(block.origSel)%3B%0D%0A%09var%20blockHeight%20%3D%20origEl.height()%3B%0D%0A%09var%20adPadding%20%3D%20this.MIN_PADDING%3B%0D%0A%09var%20adHeightSumm%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'RIGHT')%20adHeightSumm%20%3D%20this.MENU_BTN_SPACE%3B%0D%0A%0D%0A%09this._calcAdHeightForBlock(block)%3B%0D%0A%0D%0A%09var%20indexesOfOtherBlocks%20%3D%20this._getDataIndexesOfOtherBlocks(block)%3B%0D%0A%0D%0A%09var%20allDataWasChecked%20%3D%20false%3B%0D%0A%09var%20i%20%3D%200%3B%0D%0A%09var%20numOfCheckedIndexes%20%3D%200%3B%0D%0A%0D%0A%09var%20maxOfAds%20%3D%20this.getMaxAdsForBlock(blockName)%3B%0D%0A%09var%20minOfAds%20%3D%20this.getMinAdsForBlock(blockName)%3B%0D%0A%0D%0A%09u.log('indexesOfOtherBlocks'%2C%20indexesOfOtherBlocks)%3B%0D%0A%09var%20numOfFreeIndexes%20%3D%20allData.length%20-%20indexesOfOtherBlocks.length%3B%0D%0A%09var%20ttt%20%3D%200%3B%0D%0A%09var%20adHeight%3B%0D%0A%09while(i%20%3C%20allData.length%20%26%26%20ttt%3C30%20%26%26%20providedIndexes.length%3CmaxOfAds)%7B%0D%0A%0D%0A%09%09var%20indexIsFree%20%3D%20(indexesOfOtherBlocks.indexOf(i)%20%3D%3D%20-1)%3B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09var%20anywayAd%20%3D%20this.isAdAnyway(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(indexIsFree%20%26%26%20acceptableAd)%7B%0D%0A%0D%0A%09%09%09adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%0D%0A%09%09%09%2F%2Fif%20we%20can%20fit%20ad%20to%20block%20then%20add%20it%0D%0A%09%09%09addingLog.push(%7B%0D%0A%09%09%09%09i%3A%20i%2C%0D%0A%09%09%09%09t%3A%20allData%5Bi%5D.t%2C%0D%0A%09%09%09%09free%3A%20(blockHeight-adHeightSumm)%2C%0D%0A%09%09%09%09adPad%3A%20(adHeight%2Bthis.MIN_PADDING)%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%09var%20enoughSpace%20%3D%20(blockHeight%20%3E%3D%20adHeightSumm%20%2B%20adHeight%20%2B%20adPadding)%3B%0D%0A%09%09%09if(enoughSpace%20%7C%7C%20providedIndexes.length%20%3C%20minOfAds%20%7C%7C%20anywayAd)%7B%0D%0A%09%09%09%09if(!enoughSpace)%7B%0D%0A%09%09%09%09%09u.log('add%20more%20ads%20couse%20min%20ads%20required%20in%20block'%2C%20blockName%2C%20providedIndexes.length)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09%09providedIndexes.push(i)%3B%0D%0A%09%09%09%7D%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09ttt%2B%2B%3B%0D%0A%09%09i%2B%2B%3B%0D%0A%09%7D%0D%0A%09u.log('addingLog'%2C%20addingLog)%3B%0D%0A%0D%0A%09var%20freeSpace%20%3D%20blockHeight%20-%20adHeightSumm%3B%0D%0A%09var%20additionalPadding%20%3D%20freeSpace%20%2F%20(providedIndexes.length)%3B%0D%0A%0D%0A%09u.log('blockHeight'%2C%20blockHeight%2C%20'adHeightSumm'%2C%20adHeightSumm%2C%20'freeSpace'%2C%20freeSpace)%3B%0D%0A%0D%0A%09u.log('additionalPadding'%2C%20additionalPadding%2C%20'acceptable'%2C%20(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200))%3B%0D%0A%09if(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09adPadding%20%2B%3D%20additionalPadding%3B%0D%0A%09%7D%20else%20if(providedIndexes.length%20%3C%20maxOfAds%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09var%20alreadyOccupiedAdIndexes%20%3D%20indexesOfOtherBlocks.concat(providedIndexes)%3B%0D%0A%09%09var%20shortestAdIndex%20%3D%20this._getShortestAdIndex(allData%2C%20alreadyOccupiedAdIndexes%2C%20block)%3B%0D%0A%09%09if(shortestAdIndex%20%3E%20-1)%7B%0D%0A%09%09%09adHeight%20%3D%20allData%5BshortestAdIndex%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09providedIndexes.push(shortestAdIndex)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09u.log('shortestAdIndex'%2C%20shortestAdIndex%2C%20'orig%20resize'%2C%20adHeightSumm%20-%20blockHeight)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('shortened%20block'%2C%20blockName%2C%20blockHeight%2C%20adHeightSumm)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20providedData%20%3D%20%5B%5D%3B%0D%0A%09for(var%20j%3D0%3B%20j%3CprovidedIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09providedData.push(allData%5BprovidedIndexes%5Bj%5D%5D)%3B%0D%0A%09%7D%0D%0A%09u.log('providedData'%2C%20providedData%2C%20'providedIndexes'%2C%20providedIndexes%2C%20'adPadding'%2C%20adPadding)%3B%0D%0A%09block.data%20%3D%20providedData%3B%0D%0A%09block.dataIndexes%20%3D%20providedIndexes%3B%0D%0A%09block.adTopPadding%20%3D%20adPadding%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getDataIndexesOfOtherBlocks%20%3D%20function(block)%7B%0D%0A%09var%20indexes%20%3D%20%5B%5D%3B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09if(this.BLOCKS%5Bi%5D.origSel%20!%3D%20block.origSel)%7B%0D%0A%09%09%09var%20otherBlockIndexes%20%3D%20this.BLOCKS%5Bi%5D.dataIndexes%3B%0D%0A%09%09%09for(var%20j%3D0%3B%20j%3CotherBlockIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09%09%09if(indexes.indexOf(otherBlockIndexes%5Bj%5D)%20%3D%3D%20-1)%7B%0D%0A%09%09%09%09%09indexes.push(

otherBlockIndexes%5Bj%5D)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%09return%20indexes%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getShortestAdIndex%20%3D%20function(allData%2C%20excludedIndexes%2C%20block)%7B%0D%0A%09var%20minHeight%20%3D%201000000%3B%0D%0A%09var%20minHeightAdIndex%20%3D%20-1%3B%0D%0A%0D%0A%09for(var%20i%3D0%3B%20i%3CallData.length%3B%20i%2B%2B)%7B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(!acceptableAd)%20continue%3B%0D%0A%09%09if(excludedIndexes.indexOf(i)%20%3D%3D%20-1)%7B%0D%0A%09%09%09var%20adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09if(adHeight%20%3C%20minHeight)%7B%0D%0A%09%09%09%09minHeight%20%3D%20adHeight%3B%0D%0A%09%09%09%09minHeightAdIndex%20%3D%20i%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%09return%20minHeightAdIndex%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.clearDynamicBlocksData%20%3D%20function()%7B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5Bi%5D%3B%0D%0A%09%09block.data%20%3D%20%5B%5D%3B%0D%0A%09%09block.dataIndexes%20%3D%20%5B%5D%3B%0D%0A%09%09block.adTopPadding%20%3D%200%3B%0D%0A%09%09block.oldHeight%20%3D%20false%3B%0D%0A%09%09block.newHeight%20%3D%20false%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._replicateBlock%20%3D%20function(donor%2C%20recipient)%7B%0D%0A%09recipient.data%20%3D%20donor.data%3B%0D%0A%09recipient.dataIndexes%20%3D%20donor.dataIndexes%3B%0D%0A%09recipient.adTopPadding%20%3D%20donor.adTopPadding%3B%0D%0A%09recipient.oldHeight%20%3D%20%24(recipient.origSel).height()%3B%0D%0A%09recipient.newHeight%20%3D%20donor.newHeight%20%7C%7C%20%24(donor.origSel).height()%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._compareRealAndCalcHeights%20%3D%20function(block)%7B%0D%0A%09var%20cover%20%3D%20%24(block.coverSel)%3B%0D%0A%09var%20orig%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09cover.find('li').each(function(i)%7B%0D%0A%09%09var%20el%20%3D%20%24(this)%3B%0D%0A%09%09var%20title%20%3D%20el.find('h3%20a').text()%3B%0D%0A%09%09var%20calcSize%20%3D%20block.data%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09u.log(title%2C%20el.height()%2C%20calcSize)%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09u.log('block%20sizes'%2C%20%7B%0D%0A%09%09origReal%3A%20orig.height()%2C%0D%0A%09%09coverReal%3A%20cover.height()%2C%0D%0A%09%09newHeight%3A%20block.newHeight%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMaxAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20maxOfAds%20%3D%20100%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mxt)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mxr)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mxb)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.max_top_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.max_right_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.max_bottom_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20maxOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMinAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20minOfAds%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mnt)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mnr)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mnb)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.min_top_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.min_right_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.min_bottom_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20minOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.getPadding%20%3D%20function(el)%20%7B%0D%0A%09var%20right%20%3D%20el.css('padding-right')%2C%0D%0A%09%09left%20%3D%20el.css('padding-left')%3B%0D%0A%09return%20%5B0%2C%20right%2C%200%2C%20left%5D.join('%20')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMargin%20%3D%20function(el)%20%7B%0D%0A%09var%20margin%20%3D%20el.css('margin')%3B%0D%0A%09if(margin%20%3D%3D%3D%20'')%20%7B%0D%0A%09%09var%20top%20%3D%20el.css('margin-top')%2C%0D%0A%09%09%09right%20%3D%20el.css('margin-right')%2C%0D%0A%09%09%09bott%20%3D%20el.css('margin-bottom')%2C%0D%0A%09%09%09left%20%3D%20el.css('margin-left')%3B%0D%0A%09%09return%20%5Btop%2C%20right%2C%20bott%2C%20left%5D.join('%20')%3B%0D%0A%09%7D%0D%0A%09return%20margin%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getEngineIdentityParam%20%3D%20function()%20%7B%0D%0A%09return%20'%26e%3D'%2Bthis.engineCode%2B'_s'%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocksCycle%20%3D%20function(block%2C%20blockName%2C%20showOrigAd)%7B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09this.origAdCheckerCounter%5BblockName%5D%20%3D%200%3B%0D%0A%09this.origAdChecker%5BblockName%5D%20%3D%20setInterval(function()%7B%0D%0A%09%09if(self.isAdExist(block))%20%7B%0D%0A%09%09%09if(showOrigAd)%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7Delse%20if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09if(self.isOfficialSiteBlock(block))%7B%0D%0A%0D%0A%09%09%09%09self.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09self.origAdCheckerCounter%5BblockName%5D%2B%2B%3B%0D%0A%09%7D%2C%20100)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocks%20%3D%20function(showOrigAd)%20%7B%0D%0A%09this.origAdCheckerCounter%20%3D%20%7B%7D%3B%0D%0A%09this.origAdChecker%20%3D%20%7B%7D%3B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.multipleTryToFindBlocksCycle(block%2C%20blockName%2C%20showOrigAd)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FOfficial%20site%20feature%0D%0ACORE.prototype.isAdAcceptable%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20!(%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09%09)%20%7C%7C%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isElFake(%24(block.origSel))%0D%0A%09%09%09%09)%0D%0A%09%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdAnyway%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20(%0D%0A%09%09%09(%0D%0A%09%09%09%09this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09)%0D%0A%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteBlock%20%3D%20function(block)%7B%0D%0A%09return%20(block.name%20%3D%3D%20'TOP')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteAd%20%3D%20function(ad)%7B%0D%0A%09return%20(ad.origin%20%3D%3D%20%22suggestion%22)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeFakeOrigAd%20%3D%20function(block)%20%7B%0D%0A%09var%20parentEl%20%3D%20%24(block.parentSel)%3B%0D%0A%09if(!parentEl.length)%20%7B%0D%0A%09%09u.log('makeFakeOrigAd%20!parentEl.length')%3B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%09var%20origId%20%3D%20block.origSel.replace('%23'%2C%20'')%3B%0D%0A%09var%20fakeEl%20%3D%20%24('%3Cdiv%20id%3D%22fakeAd%22%3E')%3B%0D%0A%09parentEl.prepend(fakeEl)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isElFake%20%3D%20function(el)%7B%0D%0A%09return%20(el.index('%23fakeAd')%20!%3D%20-1)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.SuggestionModule%20%20%3D%20function(instanceId)%20%7B%0D%0A%09this.data%20%3D%20%7B%7D%3B%0D%0A%09this.enable%20%3D%20true%3B%0D%0A%09this.addedBookmarks%20%3D%20%7B%7D%3B%0D%0A%0D%0A%09this.setConfig%20%3D%20function(data)%7B%0D%0A%09%09this.data%20%3D%20data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getConfig%20%3D%20function()%7B%0D%0A%09%09return%20this.data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getAdsForKeyword%20%3D%20function(keyword)%7B%0D%0A%09%09if(!this.data%20%7C%7C%20!this.data.s)%20return%20%5B%5D%3B%0D%0A%09%09var%20suggestions%20%3D%20this.findSuggestionsForKeyword(keyword%2C%2010)%3B%0D%0A%09%09return%20this.generateAdData(suggestions)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.findSuggestionsForKeyword%20%3D%20function(keyword%2C%20maxAmount)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Cthis.data.s.length%20%26%26%20result.length%20%3C%3D%20maxAmount%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20this.data.s%5Bi%5D%3B%0D%0A%09%09%09if(this.isSuggestionMatched(sugg%2C%20keyword))%7B%0D%0A%09%09%09%09result.push(sugg)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.isSuggestionMatched%20%3D%20function(sugg%2C%20keyword)%7B%0D%0A%09%09keyword%20%3D%20keyword.toLowerCase()%3B%0D%0A%09%09var%20k%20%3D%20keyword.indexOf(sugg.k.toLowerCase())%20%3D%3D%3D%200%3B%0D%0A%09%09var%20s%20%3D%20sugg.s.toLowerCase().indexOf(keyword)%20%3D%3D%3D%200%3B%0D%0A%09%09return%20k%20%26%26%20s%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.generateAdData%20%3D%20function(suggestions)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Csuggestions.length%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20suggestions%5Bi%5D%3B%0D%0A%09%09%09var%20diplayUrl%20%3D%20(sugg.v)%20%3F%20sugg.v%20%3A%20sugg.u.replace(%2F.*%5C%2F%5C%2F(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%241')%3B%20%2F%2Fwww.sales.target.com%0D%0A%09%09%09var%20title%20%3D%20(sugg.t)%20%3F%20sugg.t%20%3A%20this.capitaliseFirstLetter(sugg.u.replace(%2F.*%5C%2F%5C%2F(www%5C.)%3F(%5B%5Cw.%5D%2B)%5C.(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%242'))%3B%20%2F%2FSales.target%0D%0A%0D%0A%09%09%09result.push(%7B%0D%0A%09%09%09%09%22t%22%3A%20title%2C%0D%0A%09%09%09%09%22c%22%3A%20sugg.u%2C%0D%0A%09%09%09%09%22u%22%3A%20diplayUrl%20%2B%20'%20-%20'%20%2B%20this.data.t%2C%0D%0A%09%09%09%09%22d%22%3A%20sugg.d%2C%0D%0A%09%09%09%09%22r%22%3A%201%2C%0D%0A%09%09%09%09%22origin%22%3A%20%22suggestion%22%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.capitaliseFirstLetter%20%3D%20function(string)%7B%0D%0A%09%09return%20string.charAt(0).toUpperCase()%20%2B%20string.slice(1)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.coreStyles%20%20%3D%20function()%20%7B%0D%0A%09var%20a%20%3D%20'%3Cstyle%20id%3D%22adtrCoreStyle%22%3E%5C%0D%0A%09%3C%2Fstyle%3E'%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0AENGINE.prototype.MIN_PADDING%20%3D%2020%3B%0AENGINE.prototype.BLOCKS%20%3D%20%7B%0A%0A%09%09'TOP'%20%3A%20%7B%0A%09%09%09coverId%3A%20%22sponsoredTop-cover%22%2C%0A%09%09%09origSel%3A%20%22%23sponsoredTop%22%2C%0A%09%09%09coverSel%3A%20%22%23sponsoredTop-cover%22%2C%0A%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09name%3A%20'TOP'%2C%0A%09%09%09adSel%3A%20'%23sponsoredTop%20iframe'%2C%0A%09%09%09parentSel%3A%20%22%23results%22%0A%09%09%7D%2C%0A%09%09'BOTTOM'%20%3A%20%7B%0A%09%09%09coverId%3A%20%22sponsoredBottom-cover%22%2C%0A%09%09%09origSel%3A%20%22%23sponsoredBottom%22%2C%0A%09%09%09coverSel%3A%20%22%23sponsoredBottom-cover%22%2C%0A%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09name%3A%20'BOTTOM'%2C%0A%09%09%09adSel%3A%20'%23sponsoredBottom%20iframe'%0A%09%09%7D%0A%0A%7D%3B%0A%0A%0AENGINE.prototype.INPUT_SEL%20%3D%20%22input%5Bname%3D'searchfor'%5D%22%3B%0AENGINE.prototype.SPELL_SEL%20%3D%20'%23spellSuggest%20a'%3B%0AENGINE.prototype.MAIN_CONTAINER_SEL%20%3D%20'%23results'%3B%0AENGINE.prototype.engineCode%20%3D%20'm'%3B%0A%0AENGINE.prototype.STYLES%20%3D%20%20function()%7B%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%20width%3A%20100%25%7D%20%5C%0A%09.adtrCover%20ol%20%7B%20list-style-type%3A%20none%3B%20%7D%20%5C%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%200%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%200%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%20margin-bottom%3A%200px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%233300B5%3B%20text-decoration%3Aunderline%3B%20font-size%3A17px%3B%20font-weight%3A%20normal%3B%7D%20%5C%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%230E7744%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%20font-style%3A%20normal%3B%7D%20%5C%0A%09.adtrCover%20.ac%20%7Bfont-size%3A%20small%3B%7D%20%5C%0A%09.adtrCover%20.inner%20%7Bpadding%3A%200%204px%3B%7D%20%5C%0A%20%20%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20%5C%0A%20%20%20%20visibility%3A%20hidden%3B%20%5C%0A%20%20%20%20overflow%3A%20hidden%3B%20%5C%0A%20%20%7D%20%5C%0A%20%20.adtrCover-closeBtn%7B%20%5C%0A%20%20%20%20cursor%3A%20pointer%3B%20%5C%0A%20%20%20%20padding%3A%200%202px%202px%202px%3B%20%5C%0A%20%20%20%20font-size%3A%2012px%3B%20%5C%0A%20%20%20%20text-align%3A%20center%3B%20%5C%0A%20%20%20%20position%3A%20absolute%3B%20%5C%0A%20%20%20%20height%3A%2012px%3B%20%5C%0A%20%20%20%20width%3A%2033px%3B%20%5C%0A%20%20%20%20border%3A%201px%20solid%20lightblue%3B%20%5C%0A%20%20%20%20background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0A%20%20%20%20display%3A%20inline-block%3B%20%5C%0A%20%20%20%20right%3A%201px%3B%20%5C%0A%20%20%20%20top%3A%203px%3B%20%5C%0A%20%20%7D%5C%0A%20%20.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A20px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0A%20%20.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0A%20%20.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0A%20%20%3C%2Fstyle%3E%22%3B%0A%20%20return%20a%3B%0A%7D%3B%0A%0A%0A%0A%0AENGINE.prototype.isAdExist%20%3D%20function(block)%20%7B%0A%09var%20origIFrame%20%3D%20%24(block.adSel)%3B%0A%09return%20origIFrame.length%20%26%26%20(origIFrame.height()%20%3E%200)%3B%0A%0A%7D%3B%0D%0A%0D%0A%0D%0AGoogleChrome.prototype.ff%20%3D%20function()%7B%0D%0A%09console.log('oogleChrome.prototype.ff')%3B%0D%0A%7D%3B%0D%0AFirefox.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09%24('.adtr').remove()%3B%0D%0A%7D%3B%0D%0Afunction%20IE%20()%20%7B%7D%0D%0Afunction%20Browser%20(affiliateID%2C%20instanceID)%20%7B%0A%09var%20browser%3B%0A%09%2F%2Fif%20called%20with%20a%20%22new%22%20keyword%0A%09if%20(this.constructor%20%3D%3D%20Browser)%20%7B%0A%09%09%2F%2Fpicking%20specific%20browser%0A%09%09browser%20%3D%20this.pickBrowser()%3B%0A%0A%09%09browser.affiliateID%20%3D%20affiliateID%3B%0A%09%09browser.instanceID%20%3D%20instanceID%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error(%22Browser%20is%20a%20constructor%20function%22)%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%0A%0ABrowser.prototype.pickBrowser%20%3D%20function()%20%7B%0A%09%2F%2Fchecking%20browser%0A%09var%20ischrome%20%3D%20typeof(chrome)%20%3D%3D%20'object'%2C%0A%09%09firefox%20%3D%20typeof(chrome)%20%3D%3D%20'string'%2C%0A%09%09ie%20%3D%20navigator.userAgent.indexOf(%22Trident%22)%20!%3D%3D%20-1%2C%0A%09%09browser%20%3D%20null%3B%0A%0A%09if%20(ischrome)%20%7B%0A%09%09browser%20%3D%20new%20GoogleChrome()%3B%0A%09%7D%20else%20if%20(firefox)%20%7B%0A%09%09browser%20%3D%20new%20Firefox()%3B%0A%09%7D%20else%20if%20(ie)%20%7B%0A%09%09browser%20%3D%20new%20IE()%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error('unknown%20browser')%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%3B%0A%0A%0A%0D%0A%2F%2Fsimply%20extending%20specific%20browser%20classes%20with%20basic%20class%2C%20which%20holds%20default%20browser%20methods%0A%0A%2F%2Freturns%20browser%20object%20(one%20of%20Chrome%2C%20FF%2C%20IE)%0A%0Aif(typeof(pc)%20!%3D%20'undefined')%7B%0A%09var%20affiliateID%20%3D%20pc.affiliateID%3B%0A%09var%20instanceID%20%3D%20pc.instanceId%3B%0A%09var%20engineParams%20%3D%20pc.engineParams%3B%0A%7D%0A%0Aif(%20typeof(affiliateID)%20!%3D%20'undefined'%20)%7B%0A%09%2F%2FaffiliateID%20predefined%20by%20extension%0A%09var%20browser%20%3D%20new%20Browser(affiliateID%2C%20instanceID)%3B%0A%09browser.init(instanceID%2C%20affiliateID%2C%20engineParams)%3B%0A%09Util.log('started%20browser'%2C%20affiliateID%2C%20instanceID)%3B%0A%7D%20else%20%7B%0A%09var%20browser%20%3D%20new%20Browser()%3B%0A%09var%20Engine%20%3D%20browser%3B%0A%09Util.log('prepare%20Engine')%3B%0A%7D%0A%0A%0A%0A\""
FF - prefs.js..extensions.trusted-ads.serp_whitepages: "\"%2F*!%20serp-whitepages%20-%20v0.2.3%20-%202014-04-07%2018%3A21%3A58%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0A%0Avar%20Util%20%3D%20%7B%0A%09debug%3A%20false%2C%0A%09extend%3A%20function(Child%2C%20Parent)%20%7B%0A%09%09var%20F%20%3D%20function()%20%7B%20%7D%3B%0A%09%09F.prototype%20%3D%20Parent.prototype%3B%0A%09%09Child.prototype%20%3D%20new%20F()%3B%0A%09%09Child.prototype.constructor%20%3D%20Child%3B%0A%09%09Child._super%20%3D%20Parent.prototype%3B%0A%09%7D%2C%0A%09log%3A%20function()%20%7B%0A%09%09if%20(Util.debug)%20%7B%0A%09%09%09var%20args%20%3D%20Array.prototype.slice.call(arguments)%3B%0A%09%09%09console.log.apply(console%2C%20args)%3B%0A%09%09%7D%0A%09%7D%0A%7D%3B%0A%2F%2Fshort%20alias%0Au%20%3D%20Util%3B%0A%0Afunction%20ENGINE%20()%20%7B%7D%0Afunction%20GoogleChrome%20()%20%7B%7D%0Afunction%20CORE()%20%7B%7D%0Afunction%20Firefox%20()%20%7B%7D%0Afunction%20IE%20()%20%7B%7D%0A%0AUtil.extend(ENGINE%2C%20CORE)%3B%0AUtil.extend(GoogleChrome%2C%20ENGINE)%3B%0AUtil.extend(Firefox%2C%20ENGINE)%3B%0AUtil.extend(IE%2C%20ENGINE)%3B%0D%0ACORE.prototype.ADS_HOST%20%3D%20document.location.protocol%2B%22%2F%2Fsearch.adtrustmedia.com%2Fsearch_safecontent.php%22%3B%0D%0A%0D%0ACORE.prototype.ALL_BLOCKS_SELECTOR%20%3D%20function()%7B%0D%0A%09return%20%7B%0D%0A%09%09orig%3A%20this.BLOCKS.TOP.origSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.origSel*%2F%2C%0D%0A%09%09cover%3A%20this.BLOCKS.TOP.coverSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.coverSel*%2F%0D%0A%09%7D%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.STYLES%20%3D%20%20function()%20%7B%0D%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0D%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20%7B%20%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%2304c%3B%20text-decoration%3Aunderline%3B%20font-size%3A17px%3B%7D%20%5C%0D%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23388222%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%7D%20%5C%0D%0A%09%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20visibility%3A%20hidden%3B%20overflow%3A%20hidden%3B%7D%20%5C%0D%0A%09.adtrCover-closeBtn%7B%20%5C%0D%0A%09%09cursor%3A%20pointer%3B%20%5C%0D%0A%09%09padding%3A%200%202px%202px%202px%3B%20%5C%0D%0A%09%09font-size%3A%2012px%3B%20%5C%0D%0A%09%09text-align%3A%20center%3B%20%5C%0D%0A%09%09position%3A%20absolute%3B%20%5C%0D%0A%09%09height%3A%2012px%3B%20%5C%0D%0A%09%09width%3A%2033px%3B%20%5C%0D%0A%09%09border%3A%201px%20solid%20lightblue%3B%20%5C%0D%0A%09%09background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0D%0A%09%09display%3A%20inline-block%3B%20%5C%0D%0A%09%09right%3A%201px%3B%20%5C%0D%0A%09%09top%3A%203px%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.adtrCover%20.closeAd%7B%20%5C%0D%0A%09%09text-decoration%3A%20underline%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0D%0A%09.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0D%0A%09.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0D%0A%09%3C%2Fstyle%3E%22%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.MENU_BTN_SPACE%20%3D%208%3B%0D%0ACORE.prototype.MIN_PADDING%20%3D%208%3B%0D%0A%0D%0ACORE.prototype._ads%20%3D%20%5B%5D%3B%0D%0ACORE.prototype.instanceId%20%3D%20''%3B%0D%0ACORE.prototype.affilateID%20%3D%20''%3B%0D%0ACORE.prototype.data%20%3D%20null%3B%0D%0ACORE.prototype.keyword%20%3D%20''%3B%0D%0ACORE.prototype.engineParams%20%3D%20%7B%7D%3B%0D%0ACORE.prototype.engineCode%20%3D%20''%3B%0D%0A%0D%0ACORE.prototype.start%20%3D%20function()%7B%7D%3B%0D%0A%0D%0ACORE.prototype.init%20%3D%20function(instanceId%2C%20affilateID%2C%20engineParams)%20%7B%0D%0A%09this.data%20%3D%20typeof(engineData)%20!%3D%20%22undefined%22%20%3F%20engineData%20%3A%20null%3B%0D%0A%09this.keyword%20%3D%20typeof(engineKeyword)%20!%3D%20%22undefined%22%20%3F%20engineKeyword%20%3A%20''%3B%0D%0A%0D%0A%09if(engineParams.delivPoint)%20%7B%20this.ADS_HOST%20%3D%20engineParams.delivPoint%3B%20%7D%0D%0A%0D%0A%09%24(%22head%22).append(this.coreStyles())%3B%0D%0A%09%24(%22head%22).append(this.STYLES())%3B%0D%0A%09this.instanceId%20%3D%20instanceId%3B%0D%0A%09this.affilateID%20%3D%20affilateID%3B%0D%0A%09this.engineParams%20%3D%20engineParams%3B%0D%0A%0D%0A%09this.suggModule%20%3D%20new%20this.SuggestionModule()%3B%0D%0A%09if(engineParams.suggConfig)%20%7B%0D%0A%09%09this.suggModule.setConfig(engineParams.suggConfig)%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09var%20currentKeyword%20%3D%20this.getCurrentKeyword().toLowerCase()%3B%0D%0A%0D%0A%09if(this.keyword)%7B%0D%0A%09%09this.keyword%20%3D%20decodeURIComponent(this.keyword)%3B%0D%0A%09%09this.keyword%20%3D%20this.keyword.replace(%2F%5C%2B%2Fg%2C%20'%20')%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09u.log('FROM%20PLUGIN%3A'%2C%20%7B'engineData'%3A%20this.data%2C%20'engineKeyword'%3A%20this.keyword%2C%20'currentKeyword'%3A%20currentKeyword%2C%20'engineParams'%3A%20engineParams%7D)%3B%0D%0A%0D%0A%09if%20(%20this.data%20%26%26%20(this.data%20!%3D%20'noPreload')%20%26%26%20(currentKeyword%20%3D%3D%20this.keyword)%20)%7B%0D%0A%09%09var%20suggAdData%20%3D%20this.suggModule.getAdsForKeyword(this.keyword)%3B%0D%0A%0D%0A%09%09this.data%20%3D%20suggAdData.concat(this.data)%3B%0D%0A%09%09u.log('suggAdData'%2C%20suggAdData%2C%20this.data)%3B%0D%0A%09%09if(%20this.data.length%20)%7B%0D%0A%09%09%09this.multipleTryToFindBlocks()%3B%20%2F%2Fchanged%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%20else%20%7B%0D%0A%09%09if(currentKeyword%20!%3D%20%22undefined%22)%20%7B%0D%0A%09%09%09this.keyword%20%3D%20currentKeyword%3B%0D%0A%09%09%09var%20requestUrl%20%3D%20this.getAdRequestUrl(currentKeyword)%3B%0D%0A%09%09%09this.sendAdRequest(requestUrl)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._domain_without_www%20%3D%20function(url)%20%7B%0D%0A%09var%20clean%20%3D%20url.replace(%2F%5Ewww%5C.%2F%2C'')%3B%0D%0A%09return%20clean%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getAdRequestUrl%20%3D%20function(keyword)%20%7B%0D%0A%09var%20domain%20%3D%20this._domain_without_www(document.location.host)%3B%0D%0A%09var%20requestUrl%20%3D%20this.ADS_HOST%20%2B%20%22%3F%22%20%2B%0D%0A%09%09%22adtype%3Dtext%22%20%2B%0D%0A%09%09%22%26method%3Djs%22%20%2B%0D%0A%09%09%22%26advert%3D1%22%20%2B%0D%0A%09%09%22%26referer%3D%22%20%2B%20encodeURIComponent(document.location.protocol%20%2B%22%2F%2F%22%2B%20document.location.host%2B%22%2F%22)%20%2B%0D%0A%09%09%22%26ta_affiliateid%3D%22%20%2B%20this.affilateID%20%2B%0D%0A%09%09%22%26ta_insid%3D%22%20%2B%20this.instanceId%20%2B%0D%0A%09%09%22%26kw%3D%22%20%2B%20encodeURIComponent(keyword)%20%2B%0D%0A%09%09this.getEngineIdentityParam()%3B%0D%0A%09return%20requestUrl%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getCurrentKeyword%20%3D%20function()%7B%0D%0A%09var%20keyword%20%3D%20''%3B%0D%0A%0D%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0D%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0D%0A%0D%0A%09if(spell.length)%7B%0D%0A%09%09keyword%20%3D%20spell.text()%3B%0D%0A%09%7D%20else%20if(input.length)%7B%0D%0A%09%09keyword%20%3D%20input.val()%3B%0D%0A%09%7D%0D%0A%09return%20keyword%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FTRY%20TO%20GET%20ADS%20BY%20NEW%20KEYWORD%0D%0A%2F%2F_requestInProcess%3A%20false%2C%0D%0ACORE.prototype.sendAdRequest%20%3D%20function(requestUrl)%20%7B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%0D%0A%09u.log('SEND%20REQUEST'%2C%20%5Bthis.keyword%2C%20requestUrl%5D)%3B%0D%0A%0D%0A%09%24.ajax(%7B%0D%0A%09%09url%3A%20requestUrl%2C%0D%0A%09%09dataType%3A%20'json'%2C%0D%0A%09%09error%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function()%20%7B%0D%0A%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%2C%0D%0A%09%09success%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function(data)%20%7B%0D%0A%09%09%09%09var%20suggAdData%20%3D%20scope.suggModule.getAdsForKeyword(scope.keyword)%3B%0D%0A%09%09%09%09data%20%3D%20suggAdData.concat(data)%3B%0D%0A%0D%0A%09%09%09%09if(!data.length)%20%7B%0D%0A%09%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%09%09return%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09u.log('REQUEST%20SUCCESS'%2C%20%5Bscope.keyword%2C%20scope.suggModule%2C%20data%5D)%3B%0D%0A%09%09%09%09scope.data%20%3D%20data%3B%0D%0A%09%09%09%09scope.clearDynamicBlocksData()%3B%0D%0A%09%09%09%09scope.makeCovers()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showAllOriginalAd%20%3D%20function()%20%7B%0D%0A%09u.log('showAllOriginalAd()')%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B').show()%3B%0D%0A%09if(block.adSel)%7B%0D%0A%09%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible!important%3B')%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FADS%20REPLACEMENT%20PROCESS%0D%0ACORE.prototype.makeCovers%20%3D%20function()%20%7B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%0D%0A%09%09if(!this.isAdExist(block))%20%7B%0D%0A%09%09%09if(this.isOfficialSiteBlock(block))%7B%0D%0A%09%09%09%09this.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%09continue%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09%2F%2FORIGINAL%20SELECTOR%20IS%20A%20DOM%20ELEMENT%0D%0A%09%09this._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09this.makeCover(block%2C%20blockName)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdExist%20%3D%20function(block)%20%7B%0D%0A%09var%20origSel%20%3D%20%24(block.origSel)%3B%0D%0A%09return%20origSel.length%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FPREPARE%20AND%20RENDER%20REPLACEMENT%20COVER%20(old%3A%20_prepareReplacement)%0D%0ACORE.prototype.makeCover%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('MAKE%20COVER'%2C%20blockName%2C%20%7BblockData%3A%20JSON.stringify(block.data)%7D)%3B%0D%0A%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(el.index('%23fakeAd')%20!%3D%20-1)%7B%0D%0A%09%09el%20%3D%20%24('%23fakeAd')%3B%0D%0A%09%7D%0D%0A%09var%20data%20%3D%20block.data%3B%0D%0A%0D%0A%09if%20(data.length)%20%7B%0D%0A%0D%0A%09%09var%20width%20%3D%20el.width()%3B%0D%0A%09%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%09%09%2F%2FREMOVE%20PREV%20BLOCK%0D%0A%09%09%24(block.coverSel).remove()%3B%0D%0A%0D%0A%09%09%2F%2FCREATE%20COVER%0D%0A%09%09var%20coverHeight%20%3D%20el.height()%3B%0D%0A%09%09if(block.newHeight)%7B%0D%0A%09%09%09coverHeight%20%3D%20block.newHeight%3B%0D%0A%09%09%09el.height(coverHeight)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09var%20cover%20%3D%20%24('%3Cdiv%20id%3D%22'%2B%20block.coverId%20%2B'%22%20class%3D%22adtrCover%22%20style%3D%22height%3A'%2B%20coverHeight%20%2B'px%3B%22%3E'%2B%20this._fillWithAds(block%2C%20blockName)%20%2B'%3C%2Fdiv%3E').css(%7B%0D%0A%09%09%09margin%3A%20this.getMargin(el)%2C%20padding%3A%20this.getPadding(el)%2C%0D%0A%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%7D)%3B%0D%0A%09%09cover.insertBefore(el)%3B%0D%0A%09%09el.addClass('hideOrig')%3B%0D%0A%09%09this.makeCoverMenu(block%2C%20cover%2C%20blockName)%3B%0D%0A%09%09this._compareRealAndCalcHeights(block)%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('showed%20without%20ad'%2C%20blockName)%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeCoverMenu%20%3D%20function(block%2C%20cover%2C%20blockName)%20%7B%0D%0A%20%20%20%20%20%20var%20clas%20%3D%20'atmAd'%3B%0D%0A%20%20%20%20%20%20var%20d%3B%0D%0A%0D%0A%20%20%20%20%20%20if%20(blockName%20%3D%3D%20'RIGHT')%20%7B%0D%0A%20%20%20%20%20%20%20%20clas%20%3D%20'atmAd-left'%3B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%3E%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%20else%20%7B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%3Cimg%20src%3D%22'%2Bdocument.location.protocol%2B'%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%20%2F%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FTABLE%0D%0A%20%20%20%20%20%20var%20t%20%3D%20%24(%22%3Ctable%20style%3D'visibility%3Ainherit%3B%20border-spacing%3A%201px%3B%20margin%3A%200px%3B%20border-collapse%3A%20collapse%3B%20%20background-color%3Agrey%3B%20z-index%3A100%3B'%20border%3D'1'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20style%3D'background-color%3Awhite%3B%20height%3A%2014px%3B%20padding%3A0px%203px%3B%20line-height%3A14px%3B'%3E%3Ca%20style%3D'width%3A58px%3B%20margin%3A0px%3B%20display%3Ablock%3B%20color%3Ablack%3B%20text-decoration%3Anone%3B%20text-align%3Aleft%3B%20font-weight%3Anormal%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20background-color%3Awhite%3B%20font-size%3A9px%3B'%20href%3D'https%3A%2F%2Fadtrustmedia.com%2Fwhyad.html'%20target%3D'_blank'%3EWhy%20this%20ad%3F%3C%2Fa%3E%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20class%3D'closeAd'%20style%3D'white-space%3Anowrap%3B%20color%3Ablack%3B%20background-color%3Awhite%3B%20cursor%3Apointer%3B%20padding%3A0px%203px%3B%20%20height%3A%2014px%3B%20line-height%3A14px%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A9px%3B'%3EClose%20this%20ad%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftable%3E%22)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20d.find('a.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20t.find('.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%20%20%20%20%20%20d.append(t)%3B%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FCLICK%20ON%20ATM%20AD%0D%0A%20%20%20%20%20%20d.find('.toggleTable').click(function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%24(this).next().toggle()%3B%0D%0A%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20d.appendTo(cover)%3B%0D%0A%0D%0A%20%20%20%20%20%20var%20self%20%3D%20this%3B%0D%0A%20%20%20%20%20%20function%20removeAd()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20cover.remove()%3B%0D%0A%20%20%20%20%20%20%20%20%20%20self.showOriginalAdForBlock(block)%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype._fillWithAds%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('FILL%20COVER'%2C%20blockName%2C%20%5Bblock.data%5D)%3B%0D%0A%09var%20block_content%20%3D%20''%2C%0D%0A%09%09data%20%3D%20block.data%3B%0D%0A%0D%0A%09block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09var%20adTopPadding%20%3D%20block.adTopPadding%3B%0D%0A%09%09if(i%3D%3D%3D0)%20%7B%0D%0A%09%09%09adTopPadding%20%3D%20adTopPadding%2F2%3B%0D%0A%09%09%09if(blockName%20%3D%3D%20'RIGHT')%20adTopPadding%20%2B%3D%20this.MENU_BTN_SPACE%3B%0D%0A%09%09%7D%0D%0A%09%09var%20offsiteClass%20%3D%20(data%5Bi%5D.origin%20%3D%3D%20%22suggestion%22)%20%3F%20'class%3D%22official-site%22'%20%3A%20%22%22%3B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20style%3D'padding-top%3A%20%22%2BadTopPadding%2B%22px'%22%20%2B%20offsiteClass%20%2B%20%22%3E%22%2B%0D%0A%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09return%20block_content%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._calcAdHeightForBlock%20%3D%20function(block)%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(!el.length)%20%7B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20width%20%3D%20el.width()%3B%0D%0A%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%0D%0A%09var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%20position%3Aabsolute%20!important%3B%20top%3A%20-10000px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%2F%2F%20var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%09%09%09).css(%7B%0D%0A%09%09%09%09%09margin%3A%20this.getMargin(el)%2C%0D%0A%09%09%09%09%09padding%3A%20this.getPadding(el)%20%2C%0D%0A%09%09%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%09%09%7D)%3B%0D%0A%0D%0A%0D%0A%09var%20block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%09var%20data%20%3D%20this.data%3B%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20data-index%3D'%22%2Bi%2B%22'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bdata%5Bi%5D.t%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09div.html(block_content)%3B%0D%0A%09%24(this.MAIN_CONTAINER_SEL).append(div)%3B%0D%0A%0D%0A%09u.log('MAIN_CONTAINER_SEL'%2C%20%24(this.MAIN_CONTAINER_SEL).length)%3B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%09div.find('li').each(function(i%2C%20li)%7B%0D%0A%09%09li%20%3D%20%24(li)%3B%0D%0A%09%09var%20index%20%3D%20li.data('index')%3B%0D%0A%09%09if(!scope.data%5Bindex%5D.h)%20scope.data%5Bindex%5D.h%20%3D%20%7B%7D%3B%0D%0A%09%09scope.data%5Bindex%5D.h%5Bblock.origSel%5D%20%3D%20li.height()%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09%2F%2F%20div.remove()%3B%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._provideAdDataForBlock%20%3D%20function(block%2C%20blockName)%7B%0D%0A%09u.log('DATA%20FOR%20BLOCK'%2C%20blockName)%3B%0D%0A%0D%0A%09var%20addingLog%20%3D%20%5B%5D%3B%0D%0A%0D%0A%09var%20MAX_ADDITIONAL_PADDING%20%3D%2015%3B%0D%0A%0D%0A%09var%20providedIndexes%20%3D%20%5B%5D%3B%0D%0A%09var%20allData%20%3D%20this.data%3B%0D%0A%0D%0A%09var%20origEl%20%3D%20%24(block.origSel)%3B%0D%0A%09var%20blockHeight%20%3D%20origEl.height()%3B%0D%0A%09var%20adPadding%20%3D%20this.MIN_PADDING%3B%0D%0A%09var%20adHeightSumm%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'RIGHT')%20adHeightSumm%20%3D%20this.MENU_BTN_SPACE%3B%0D%0A%0D%0A%09this._calcAdHeightForBlock(block)%3B%0D%0A%0D%0A%09var%20indexesOfOtherBlocks%20%3D%20this._getDataIndexesOfOtherBlocks(block)%3B%0D%0A%0D%0A%09var%20allDataWasChecked%20%3D%20false%3B%0D%0A%09var%20i%20%3D%200%3B%0D%0A%09var%20numOfCheckedIndexes%20%3D%200%3B%0D%0A%0D%0A%09var%20maxOfAds%20%3D%20this.getMaxAdsForBlock(blockName)%3B%0D%0A%09var%20minOfAds%20%3D%20this.getMinAdsForBlock(blockName)%3B%0D%0A%0D%0A%09u.log('indexesOfOtherBlocks'%2C%20indexesOfOtherBlocks)%3B%0D%0A%09var%20numOfFreeIndexes%20%3D%20allData.length%20-%20indexesOfOtherBlocks.length%3B%0D%0A%09var%20ttt%20%3D%200%3B%0D%0A%09var%20adHeight%3B%0D%0A%09while(i%20%3C%20allData.length%20%26%26%20ttt%3C30%20%26%26%20providedIndexes.length%3CmaxOfAds)%7B%0D%0A%0D%0A%09%09var%20indexIsFree%20%3D%20(indexesOfOtherBlocks.indexOf(i)%20%3D%3D%20-1)%3B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09var%20anywayAd%20%3D%20this.isAdAnyway(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(indexIsFree%20%26%26%20acceptableAd)%7B%0D%0A%0D%0A%09%09%09adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%0D%0A%09%09%09%2F%2Fif%20we%20can%20fit%20ad%20to%20block%20then%20add%20it%0D%0A%09%09%09addingLog.push(%7B%0D%0A%09%09%09%09i%3A%20i%2C%0D%0A%09%09%09%09t%3A%20allData%5Bi%5D.t%2C%0D%0A%09%09%09%09free%3A%20(blockHeight-adHeightSumm)%2C%0D%0A%09%09%09%09adPad%3A%20(adHeight%2Bthis.MIN_PADDING)%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%09var%20enoughSpace%20%3D%20(blockHeight%20%3E%3D%20adHeightSumm%20%2B%20adHeight%20%2B%20adPadding)%3B%0D%0A%09%09%09if(enoughSpace%20%7C%7C%20providedIndexes.length%20%3C%20minOfAds%20%7C%7C%20anywayAd)%7B%0D%0A%09%09%09%09if(!enoughSpace)%7B%0D%0A%09%09%09%09%09u.log('add%20more%20ads%20couse%20min%20ads%20required%20in%20block'%2C%20blockName%2C%20providedIndexes.length)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09%09providedIndexes.push(i)%3B%0D%0A%09%09%09%7D%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09ttt%2B%2B%3B%0D%0A%09%09i%2B%2B%3B%0D%0A%09%7D%0D%0A%09u.log('addingLog'%2C%20addingLog)%3B%0D%0A%0D%0A%09var%20freeSpace%20%3D%20blockHeight%20-%20adHeightSumm%3B%0D%0A%09var%20additionalPadding%20%3D%20freeSpace%20%2F%20(providedIndexes.length)%3B%0D%0A%0D%0A%09u.log('blockHeight'%2C%20blockHeight%2C%20'adHeightSumm'%2C%20adHeightSumm%2C%20'freeSpace'%2C%20freeSpace)%3B%0D%0A%0D%0A%09u.log('additionalPadding'%2C%20additionalPadding%2C%20'acceptable'%2C%20(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200))%3B%0D%0A%09if(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09adPadding%20%2B%3D%20additionalPadding%3B%0D%0A%09%7D%20else%20if(providedIndexes.length%20%3C%20maxOfAds%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09var%20alreadyOccupiedAdIndexes%20%3D%20indexesOfOtherBlocks.concat(providedIndexes)%3B%0D%0A%09%09var%20shortestAdIndex%20%3D%20this._getShortestAdIndex(allData%2C%20alreadyOccupiedAdIndexes%2C%20block)%3B%0D%0A%09%09if(shortestAdIndex%20%3E%20-1)%7B%0D%0A%09%09%09adHeight%20%3D%20allData%5BshortestAdIndex%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09providedIndexes.push(shortestAdIndex)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09u.log('shortestAdIndex'%2C%20shortestAdIndex%2C%20'orig%20resize'%2C%20adHeightSumm%20-%20blockHeight)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('shortened%20block'%2C%20blockName%2C%20blockHeight%2C%20adHeightSumm)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20providedData%20%3D%20%5B%5D%3B%0D%0A%09for(var%20j%3D0%3B%20j%3CprovidedIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09providedData.push(allData%5BprovidedIndexes%5Bj%5D%5D)%3B%0D%0A%09%7D%0D%0A%09u.log('providedData'%2C%20providedData%2C%20'providedIndexes'%2C%20providedIndexes%2C%20'adPadding'%2C%20adPadding)%3B%0D%0A%09block.data%20%3D%20providedData%3B%0D%0A%09block.dataIndexes%20%3D%20providedIndexes%3B%0D%0A%09block.adTopPadding%20%3D%20adPadding%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getDataIndexesOfOtherBlocks%20%3D%20function(block)%7B%0D%0A%09var%20indexes%20%3D%20%5B%5D%3B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09if(this.BLOCKS%5Bi%5D.origSel%20!%3D%20block.origSel)%7B%0D%0A%09%09%09var%20otherBlockIndexes%20%3D%20this.BLOCKS%5Bi%5D.dataIndexes%3B%0D%0A%09%09%09for(var%20j%3D0%3B%20j%3CotherBlockIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09%09%09if(indexes.indexOf(otherBlockIndexes%5Bj%5D)%20%3D%3D%20-1)%7B%0D%0A%09%09%09%09%09indexes.push(otherBlockIndexes%5Bj%5D)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%09return%20indexes%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getShortestAdIndex%20%3D%20function(allData%2C%20excludedIndexes%2C%20block)%7B%0D%0A%09var%20minHeight%20%3D%201000000%3B%0D%0A%09var%20minHeightAdIndex%20%3D%20-1%3B%0D%0A%0D%0A%09for(var%20i%3D0%3B%20i%3CallData.length%3B%20i%2B%2B)%7B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(!acceptableAd)%20continue%3B%0D%0A%09%09if(excludedIndexes.indexOf(i)%20%3D%3D%20-1)%7B%0D%0A%09%09%09var%20adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09if(adHeight%20%3C%20minHeight)%7B%0D%0A%09%09%09%09minHeight%20%3D%20adHeight%3B%0D%0A%09%09%09%09minHeightAdIndex%20%3D%20i%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%09return%20minHeightAdIndex%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.clearDynamicBlocksData%20%3D%20function()%7B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5Bi%5D%3B%0D%0A%09%09block.data%20%3D%20%5B%5D%3B%0D%0A%09%09block.dataIndexes%20%3D%20%5B%5D%3B%0D%0A%09%09block.adTopPadding%20%3D%200%3B%0D%0A%09%09block.oldHeight%20%3D%20false%3B%0D%0A%09%09block.newHeight%20%3D%20false%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._replicateBlock%20%3D%20function(donor%2C%20recipient)%7B%0D%0A%09recipient.data%20%3D%20donor.data%3B%0D%0A%09recipient.dataIndexes%20%3D%20donor.dataIndexes%3B%0D%0A%09recipient.adTopPadding%20%3D%20donor.adTopPadding%3B%0D%0A%09recipient.oldHeight%20%3D%20%24(recipient.origSel).height()%3B%0D%0A%09recipient.newHeight%20%3D%20donor.newHeight%20%7C%7C%20%24(donor.origSel).height()%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._compareRealAndCalcHeights%20%3D%20function(block)%7B%0D%0A%09var%20cover%20%3D%20%24(block.coverSel)%3B%0D%0A%09var%20orig%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09cover.find('li').each(function(i)%7B%0D%0A%09%09var%20el%20%3D%20%24(this)%3B%0D%0A%09%09var%20title%20%3D%20el.find('h3%20a').text()%3B%0D%0A%09%09var%20calcSize%20%3D%20block.data%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09u.log(title%2C%20el.height()%2C%20calcSize)%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09u.log('block%20sizes'%2C%20%7B%0D%0A%09%09origReal%3A%20orig.height()%2C%0D%0A%09%09coverReal%3A%20cover.height()%2C%0D%0A%09%09newHeight%3A%20block.newHeight%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMaxAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20maxOfAds%20%3D%20100%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mxt)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mxr)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mxb)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.max_top_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.max_right_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.max_bottom_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20maxOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMinAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20minOfAds%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mnt)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mnr)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mnb)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.min_top_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.min_right_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.min_bottom_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20minOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.getPadding%20%3D%20function(el)%20%7B%0D%0A%09var%20right%20%3D%20el.css('padding-right')%2C%0D%0A%09%09left%20%3D%20el.css('padding-left')%3B%0D%0A%09return%20%5B0%2C%20right%2C%200%2C%20left%5D.join('%20')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMargin%20%3D%20function(el)%20%7B%0D%0A%09var%20margin%20%3D%20el.css('margin')%3B%0D%0A%09if(margin%20%3D%3D%3D%20'')%20%7B%0D%0A%09%09var%20top%20%3D%20el.css('margin-top')%2C%0D%0A%09%09%09right%20%3D%20el.css('margin-right')%2C%0D%0A%09%09%09bott%20%3D%20el.css('margin-bottom')%2C%0D%0A%09%09%09left%20%3D%20el.css('margin-left')%3B%0D%0A%09%09return%20%5Btop%2C%20right%2C%20bott%2C%20left%5D.join('%20')%3B%0D%0A%09%7D%0D%0A%09return%20margin%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getEngineIdentityParam%20%3D%20function()%20%7B%0D%0A%09return%20'%26e%3D'%2Bthis.engineCode%2B'_s'%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocksCycle%20%3D%20function(block%2C%20blockName%2C%20showOrigAd)%7B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09this.origAdCheckerCounter%5BblockName%5D%20%3D%200%3B%0D%0A%09this.origAdChecker%5BblockName%5D%20%3D%20setInterval(function()%7B%0D%0A%09%09if(self.isAdExist(block))%20%7B%0D%0A%09%09%09if(showOrigAd)%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7Delse%20if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09if(self.isOfficialSiteBlock(block))%7B%0D%0A%0D%0A%09%09%09%09self.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09self.origAdCheckerCounter%5BblockName%5D%2B%2B%3B%0D%0A%09%7D%2C%20100)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocks%20%3D%20function(showOrigAd)%20%7B%0D%0A%09this.origAdCheckerCounter%20%3D%20%7B%7D%3B%0D%0A%09this.origAdChecker%20%3D%20%7B%7D%3B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.multipleTryToFindBlocksCycle(block%2C%20blockName%2C%20showOrigAd)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FOfficial%20site%20feature%0D%0ACORE.prototype.isAdAcceptable%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20!(%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09%09)%20%7C%7C%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isElFake(%24(block.origSel))%0D%0A%09%09%09%09)%0D%0A%09%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdAnyway%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20(%0D%0A%09%09%09(%0D%0A%09%09%09%09this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09)%0D%0A%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteBlock%20%3D%20function(block)%7B%0D%0A%09return%20(block.name%20%3D%3D%20'TOP')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteAd%20%3D%20function(ad)%7B%0D%0A%09return%20(ad.origin%20%3D%3D%20%22suggestion%22)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeFakeOrigAd%20%3D%20function(block)%20%7B%0D%0A%09var%20parentEl%20%3D%20%24(block.parentSel)%3B%0D%0A%09if(!parentEl.length)%20%7B%0D%0A%09%09u.log('makeFakeOrigAd%20!parentEl.length')%3B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%09var%20origId%20%3D%20block.origSel.replace('%23'%2C%20'')%3B%0D%0A%09var%20fakeEl%20%3D%20%24('%3Cdiv%20id%3D%22fakeAd%22%3E')%3B%0D%0A%09parentEl.prepend(fakeEl)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isElFake%20%3D%20function(el)%7B%0D%0A%09return%20(el.index('%23fakeAd')%20!%3D%20-1)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.SuggestionModule%20%20%3D%20function(instanceId)%20%7B%0D%0A%09this.data%20%3D%20%7B%7D%3B%0D%0A%09this.enable%20%3D%20true%3B%0D%0A%09this.addedBookmarks%20%3D%20%7B%7D%3B%0D%0A%0D%0A%09this.setConfig%20%3D%20function(data)%7B%0D%0A%09%09this.data%20%3D%20data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getConfig%20%3D%20function()%7B%0D%0A%09%09return%20this.data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getAdsForKeyword%20%3D%20function(keyword)%7B%0D%0A%09%09if(!this.data%20%7C%7C%20!this.data.s)%20return%20%5B%5D%3B%0D%0A%09%09var%20suggestions%20%3D%20this.findSuggestionsForKeyword(keyword%2C%2010)%3B%0D%0A%09%09return%20this.generateAdData(suggestions)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.findSuggestionsForKeyword%20%3D%20function(keyword%2C%20maxAmount)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Cthis.data.s.length%20%26%26%20result.length%20%3C%3D%20maxAmount%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20this.data.s%5Bi%5D%3B%0D%0A%09%09%09if(this.isSuggestionMatched(sugg%2C%20keyword))%7B%0D%0A%09%09%09%09result.push(sugg)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.isSuggestionMatched%20%3D%20function(sugg%2C%20keyword)%7B%0D%0A%09%09keyword%20%3D%20keyword.toLowerCase()%3B%0D%0A%09%09var%20k%20%3D%20keyword.indexOf(sugg.k.toLowerCase())%20%3D%3D%3D%200%3B%0D%0A%09%09var%20s%20%3D%20sugg.s.toLowerCase().indexOf(keyword)%20%3D%3D%3D%200%3B%0D%0A%09%09return%20k%20%26%26%20s%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.generateAdData%20%3D%20function(suggestions)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Csuggestions.length%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20suggestions%5Bi%5D%3B%0D%0A%09%09%09var%20diplayUrl%20%3D%20(sugg.v)%20%3F%20sugg.v%20%3A%20sugg.u.replace(%2F.*%5C%2F%5C%2F(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%241')%3B%20%2F%2Fwww.sales.target.com%0D%0A%09%09%09var%20title%20%3D%20(sugg.t)%20%3F%20sugg.t%20%3A%20this.capitaliseFirstLetter(sugg.u.replace(%2F.*%5C%2F%5C%2F(www%5C.)%3F(%5B%5Cw.%5D%2B)%5C.(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%242'))%3B%20%2F%2FSales.target%0D%0A%0D%0A%09%09%09result.push(%7B%0D%0A%09%09%09%09%22t%22%3A%20title%2C%0D%0A%09%09%09%09%22c%22%3A%20sugg.u%2C%0D%0A%09%09%09%09%22u%22%3A%20diplayUrl%20%2B%20'%20-%20'%20%2B%20this.data.t%2C%0D%0A%09%09%09%09%22d%22%3A%20sugg.d%2C%0D%0A%09%09%09%09%22r%22%3A%201%2C%0D%0A%09%09%09%09%22origin%22%3A%20%22suggestion%22%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.capitaliseFirstLetter%20%3D%20function(string)%7B%0D%0A%09%09return%20string.charAt(0).toUpperCase()%20%2B%20string.slice(1)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.coreStyles%20%20%3D%20function()%20%7B%0D%0A%09var%20a%20%3D%20'%3Cstyle%20id%3D%22adtrCoreStyle%22%3E%5C%0D%0A%09%3C%2Fstyle%3E'%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0AENGINE.prototype.BLOCKS%20%3D%20%7B%0A%0A%09%09'TOP'%3A%20%7B%0A%09%09%09origSel%3A%20'%23serp_bigmap_top'%2C%0A%09%09%09coverSel%3A%20'%23serp_bigmap_top_atmcover'%2C%0A%09%09%09name%3A%20'TOP'%2C%0A%09%09%09coverId%3A%20'serp_bigmap_top_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23serp_bigmap_top%20iframe'%2C%0A%09%09%09parentSel%3A%20'%23right'%0A%09%09%7D%2C%0A%0A%09%09'BOTTOM'%3A%20%7B%0A%09%09%09origSel%3A%20'%23serp_bigmap_wide'%2C%0A%09%09%09coverSel%3A%20'%23serp_bigmap_bot_atmcover'%2C%0A%09%09%09name%3A%20'BOTTOM'%2C%0A%09%09%09coverId%3A%20'serp_bigmap_bot_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23serp_bigmap_wide%20iframe'%0A%09%09%7D%0A%0A%7D%3B%0A%0A%0AENGINE.prototype.INPUT_SEL%20%3D%20'%23key'%3B%0AENGINE.prototype.SPELL_SEL%20%3D%20'%23spell%20a%20b'%3B%0AENGINE.prototype.MAIN_CONTAINER_SEL%20%3D%20'%23serp_bigmap_wide'%3B%0AENGINE.prototype.engineCode%20%3D%20'w'%3B%0A%0AENGINE.prototype.isAdExist%20%3D%20function(block)%20%7B%0A%09var%20origIFrame%20%3D%20%24(block.adSel)%3B%0A%09return%20origIFrame.length%20%26%26%20(origIFrame.height()%20%3E%200)%3B%0A%7D%3B%0A%0AENGINE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0A%09if(!el.length)%20return%3B%0A%09el.removeClass('hideOrig')%3B%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0A%7D%3B%0A%0AENGINE.prototype.STYLES%20%3D%20%20function()%7B%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%20border%3A%201px%20solid%20%23CCC%3B%7D%20%5C%0A%09.adtrCover%20ol%20%7B%20list-style-type%3A%20none%3B%20%20margin-left%3A%200px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%20line-height%3A%2015px%3B%20margin%3A%200px%3B%20%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%234289B7%3B%20text-decoration%3Aunderline%3B%20font-weight%3A%20normal%3B%7D%20%5C%0A%09.adtrCover%20.kv.kva%20%7B%20height%3A15px%3B%7D%20%5C%0A%09.adtrCover%20.official-site%20%20.kv.kva%20%7B%20height%3Aauto%3B%7D%20%5C%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%234289B7%3B%20font-size%3A12px%20!important%3B%20height%3A16px%3B%20%7D%20%5C%0A%09.ac%20%7Bline-height%3A%2017px%3B%7D%5C%0A%20%20%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20%5C%0A%20%20%20%20visibility%3A%20hidden%3B%20%5C%0A%20%20%20%20overflow%3A%20hidden%3B%20%5C%0A%20%20%7D%20%5C%0A%20%20%23serp_bigmap_top%2C%20%23serp_bigmap_wide%7B%5C%0A%09visibility%3A%20hidden%20!important%3B%20%5C%0A%20%20%7D%5C%0A%20%20.adtrCover-closeBtn%7B%20%5C%0A%20%20%20%20cursor%3A%20pointer%3B%20%5C%0A%20%20%20%20padding%3A%200%202px%202px%202px%3B%20%5C%0A%20%20%20%20font-size%3A%2012px%3B%20%5C%0A%20%20%20%20text-align%3A%20center%3B%20%5C%0A%20%20%20%20position%3A%20absolute%3B%20%5C%0A%20%20%20%20height%3A%2012px%3B%20%5C%0A%20%20%20%20width%3A%2033px%3B%20%5C%0A%20%20%20%20border%3A%201px%20solid%20lightblue%3B%20%5C%0A%20%20%20%20background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0A%20%20%20%20display%3A%20inline-block%3B%20%5C%0A%20%20%20%20right%3A%201px%3B%20%5C%0A%20%20%20%20top%3A%203px%3B%20%5C%0A%20%20%7D%5C%0A%20%20.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0A%20%20.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0A%20%20.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0A%20%20%3C%2Fstyle%3E%22%3B%0A%20%20return%20a%3B%0A%7D%3B%0A%0A%0D%0AGoogleChrome.prototype.ff%20%3D%20function()%7B%0D%0A%09console.log('oogleChrome.prototype.ff')%3B%0D%0A%7D%3B%0D%0AFirefox.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09%24('.adtr').remove()%3B%0D%0A%7D%3B%0D%0AIE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09%24('%23adtr').remove()%3B%0D%0A%7D%3B%0D%0Afunction%20Browser%20(affiliateID%2C%20instanceID)%20%7B%0A%09var%20browser%3B%0A%09%2F%2Fif%20called%20with%20a%20%22new%22%20keyword%0A%09if%20(this.constructor%20%3D%3D%20Browser)%20%7B%0A%09%09%2F%2Fpicking%20specific%20browser%0A%09%09browser%20%3D%20this.pickBrowser()%3B%0A%0A%09%09browser.affiliateID%20%3D%20affiliateID%3B%0A%09%09browser.instanceID%20%3D%20instanceID%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error(%22Browser%20is%20a%20constructor%20function%22)%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%0A%0ABrowser.prototype.pickBrowser%20%3D%20function()%20%7B%0A%09%2F%2Fchecking%20browser%0A%09var%20ischrome%20%3D%20typeof(chrome)%20%3D%3D%20'object'%2C%0A%09%09firefox%20%3D%20typeof(chrome)%20%3D%3D%20'string'%2C%0A%09%09ie%20%3D%20navigator.userAgent.indexOf(%22Trident%22)%20!%3D%3D%20-1%2C%0A%09%09browser%20%3D%20null%3B%0A%0A%09if%20(ischrome)%20%7B%0A%09%09browser%20%3D%20new%20GoogleChrome()%3B%0A%09%7D%20else%20if%20(firefox)%20%7B%0A%09%09browser%20%3D%20new%20Firefox()%3B%0A%09%7D%20else%20if%20(ie)%20%7B%0A%09%09browser%20%3D%20new%20IE()%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error('unknown%20browser')%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%3B%0A%0A%0A%0D%0A%2F%2Fsimply%20extending%20specific%20browser%20classes%20with%20basic%20class%2C%20which%20holds%20default%20browser%20methods%0A%0A%2F%2Freturns%20browser%20object%20(one%20of%20Chrome%2C%20FF%2C%20IE)%0A%0Aif(typeof(pc)%20!%3D%20'undefined')%7B%0A%09var%20affiliateID%20%3D%20pc.affiliateID%3B%0A%09var%20instanceID%20%3D%20pc.instanceId%3B%0A%09var%20engineParams%20%3D%20pc.engineParams%3B%0A%7D%0A%0Aif(%20typeof(affiliateID)%20!%3D%20'undefined'%20)%7B%0A%09%2F%2FaffiliateID%20predefined%20by%20extension%0A%09var%20browser%20%3D%20new%20Browser(affiliateID%2C%20instanceID)%3B%0A%09browser.init(instanceID%2C%20affiliateID%2C%20engineParams)%3B%0A%09Util.log('started%20browser'%2C%20affiliateID%2C%20instanceID)%3B%0A%7D%20else%20%7B%0A%09var%20browser%20%3D%20new%20Browser()%3B%0A%09var%20Engine%20%3D%20browser%3B%0A%09Util.log('prepare%20Engine')%3B%0A%7D%0A%0A%0A%0A\""
FF - prefs.js..extensions.trusted-ads.serp_yellowpages: "\"%2F*!%20serp-yellowpages%20-%20v0.1.11%20-%202014-05-26%2016%3A28%3A20%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0Avar%20isIE%20%3D%20navigator.appName%20%3D%3D%20'Microsoft%20Internet%20Explorer'%3B%0Avar%20isIE8%20%3D%20isIE%20%26%26%20navigator.appVersion.indexOf(%22MSIE%208%22)%20!%3D%20-1%3B%0A%0A%0Avar%20Util%20%3D%20%7B%0A%09debug%3A%20true%2C%0A%09extend%3A%20function(Child%2C%20Parent)%20%7B%0A%09%09var%20F%20%3D%20function()%20%7B%20%7D%3B%0A%09%09F.prototype%20%3D%20Parent.prototype%3B%0A%09%09Child.prototype%20%3D%20new%20F()%3B%0A%09%09Child.prototype.constructor%20%3D%20Child%3B%0A%09%09Child._super%20%3D%20Parent.prototype%3B%0A%09%7D%2C%0A%09log%3A%20function()%20%7B%0A%09%09if%20(Util.debug)%20%7B%0A%09%09%09var%20args%20%3D%20Array.prototype.slice.call(arguments)%3B%0A%09%09%09if(isIE)%7B%0A%09%09%09%09var%20argsStr%20%3D%20%5B%5D%3B%0A%09%09%09%09for(var%20i%3D0%3Bi%3Cargs.length%3Bi%2B%2B)%7B%0A%09%09%09%09%09if(typeof(args%5Bi%5D)%20%3D%3D%20'object')%7B%0A%09%09%09%09%09%09argsStr.push(JSON.stringify(args%5Bi%5D))%3B%0A%09%09%09%09%09%7Delse%7B%0A%09%09%09%09%09%09argsStr.push(args%5Bi%5D)%3B%0A%09%09%09%09%09%7D%0A%09%09%09%09%7D%0A%09%09%09%09console.log(JSON.stringify(argsStr))%3B%0A%09%09%09%7D%20else%20%7B%0A%09%09%09%09console.log.apply(console%2C%20args)%3B%0A%09%09%09%7D%0A%0A%09%09%7D%0A%09%7D%0A%7D%3B%0A%2F%2Fshort%20alias%0Au%20%3D%20Util%3B%0A%0Afunction%20CORE()%20%7B%7D%0Afunction%20LAYER()%20%7B%7D%0Afunction%20ENGINE%20()%20%7B%7D%0Afunction%20GoogleChrome%20()%20%7B%7D%0Afunction%20Firefox%20()%20%7B%7D%0Afunction%20IE%20()%20%7B%7D%0A%0AUtil.extend(LAYER%2C%20CORE)%3B%0AUtil.extend(ENGINE%2C%20LAYER)%3B%0AUtil.extend(GoogleChrome%2C%20ENGINE)%3B%0AUtil.extend(Firefox%2C%20ENGINE)%3B%0AUtil.extend(IE%2C%20ENGINE)%3B%0D%0ACORE.prototype.ADS_HOST%20%3D%20document.location.protocol%2B%22%2F%2Fsearch.adtrustmedia.com%2Fsearch_safecontent.php%22%3B%0D%0A%0D%0ACORE.prototype.ALL_BLOCKS_SELECTOR%20%3D%20function()%7B%0D%0A%09return%20%7B%0D%0A%09%09orig%3A%20this.BLOCKS.TOP.origSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.origSel*%2F%2C%0D%0A%09%09cover%3A%20this.BLOCKS.TOP.coverSel%2F*%2B%22%2C%20%22%2Bthis.BLOCKS.BOTTOM.coverSel*%2F%0D%0A%09%7D%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.STYLES%20%3D%20%20function()%20%7B%0D%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0D%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20%7B%20%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20font-size%3A12px%3B%7D%20%5C%0D%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%2304c%3B%20text-decoration%3Aunderline%3B%20font-size%3A17px%3B%7D%20%5C%0D%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23388222%3B%20font-size%3A13px%20!important%3B%20height%3A16px%3B%7D%20%5C%0D%0A%09%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%7B%20visibility%3A%20hidden%3B%20overflow%3A%20hidden%3B%7D%20%5C%0D%0A%09.adtrCover-closeBtn%7B%20%5C%0D%0A%09%09cursor%3A%20pointer%3B%20%5C%0D%0A%09%09padding%3A%200%202px%202px%202px%3B%20%5C%0D%0A%09%09font-size%3A%2012px%3B%20%5C%0D%0A%09%09text-align%3A%20center%3B%20%5C%0D%0A%09%09position%3A%20absolute%3B%20%5C%0D%0A%09%09height%3A%2012px%3B%20%5C%0D%0A%09%09width%3A%2033px%3B%20%5C%0D%0A%09%09border%3A%201px%20solid%20lightblue%3B%20%5C%0D%0A%09%09background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0D%0A%09%09display%3A%20inline-block%3B%20%5C%0D%0A%09%09right%3A%201px%3B%20%5C%0D%0A%09%09top%3A%203px%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.adtrCover%20.closeAd%7B%20%5C%0D%0A%09%09text-decoration%3A%20underline%3B%20%5C%0D%0A%09%7D%5C%0D%0A%09.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0D%0A%09.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0D%0A%09.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20%7B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0D%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0D%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0D%0A%09%3C%2Fstyle%3E%22%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.MENU_BTN_SPACE%20%3D%208%3B%0D%0ACORE.prototype.MIN_PADDING%20%3D%208%3B%0D%0A%0D%0ACORE.prototype._ads%20%3D%20%5B%5D%3B%0D%0ACORE.prototype.instanceId%20%3D%20''%3B%0D%0ACORE.prototype.affilateID%20%3D%20''%3B%0D%0ACORE.prototype.data%20%3D%20null%3B%0D%0ACORE.prototype.keyword%20%3D%20''%3B%0D%0ACORE.prototype.engineParams%20%3D%20%7B%7D%3B%0D%0ACORE.prototype.engineCode%20%3D%20''%3B%0D%0A%0D%0ACORE.prototype.start%20%3D%20function()%7B%7D%3B%0D%0A%0D%0ACORE.prototype.init%20%3D%20function(instanceId%2C%20affilateID%2C%20engineParams)%20%7B%0D%0A%09console.log('init')%3B%0D%0A%09this.data%20%3D%20typeof(engineData)%20!%3D%20%22undefined%22%20%3F%20engineData%20%3A%20null%3B%0D%0A%09this.keyword%20%3D%20typeof(engineKeyword)%20!%3D%20%22undefined%22%20%3F%20engineKeyword%20%3A%20''%3B%0D%0A%0D%0A%09if(engineParams.delivPoint)%20%7B%20this.ADS_HOST%20%3D%20engineParams.delivPoint%3B%20%7D%0D%0A%0D%0A%09%24(%22head%22).append(this.coreStyles())%3B%0D%0A%09%24(%22head%22).append(this.STYLES())%3B%0D%0A%09this.instanceId%20%3D%20instanceId%3B%0D%0A%09this.affilateID%20%3D%20affilateID%3B%0D%0A%09this.engineParams%20%3D%20engineParams%3B%0D%0A%0D%0A%09this.suggModule%20%3D%20new%20this.SuggestionModule()%3B%0D%0A%09if(engineParams.suggConfig)%20%7B%0D%0A%09%09this.suggModule.setConfig(engineParams.suggConfig)%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09var%20currentKeyword%20%3D%20this.getCurrentKeyword().toLowerCase()%3B%0D%0A%0D%0A%09if(this.keyword)%7B%0D%0A%09%09this.keyword%20%3D%20decodeURIComponent(this.keyword)%3B%0D%0A%09%09this.keyword%20%3D%20this.keyword.replace(%2F%5C%2B%2Fg%2C%20'%20')%3B%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%0D%0A%09u.log('FROM%20PLUGIN%3A'%2C%20%7B'engineData'%3A%20this.data%2C%20'engineKeyword'%3A%20this.keyword%2C%20'currentKeyword'%3A%20currentKeyword%2C%20'engineParams'%3A%20engineParams%7D)%3B%0D%0A%0D%0A%09if%20(%20this.data%20%26%26%20(this.data%20!%3D%20'noPreload')%20%26%26%20(currentKeyword%20%3D%3D%20this.keyword)%20)%7B%0D%0A%09%09var%20suggAdData%20%3D%20this.suggModule.getAdsForKeyword(this.keyword)%3B%0D%0A%0D%0A%09%09this.data%20%3D%20suggAdData.concat(this.data)%3B%0D%0A%09%09u.log('suggAdData'%2C%20suggAdData%2C%20this.data)%3B%0D%0A%09%09if(%20this.data.length%20)%7B%0D%0A%09%09%09this.multipleTryToFindBlocks()%3B%20%2F%2Fchanged%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%20else%20%7B%0D%0A%09%09if(currentKeyword%20!%3D%20%22undefined%22)%20%7B%0D%0A%09%09%09this.keyword%20%3D%20currentKeyword%3B%0D%0A%09%09%09var%20requestUrl%20%3D%20this.getAdRequestUrl(currentKeyword)%3B%0D%0A%09%09%09this.sendAdRequest(requestUrl)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%09%09%09this.multipleTryToFindBlocks('showOrigAd')%3B%20%2F%2Fchanged%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._domain_without_www%20%3D%20function(url)%20%7B%0D%0A%09var%20clean%20%3D%20url.replace(%2F%5Ewww%5C.%2F%2C'')%3B%0D%0A%09return%20clean%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getAdRequestUrl%20%3D%20function(keyword)%20%7B%0D%0A%09var%20domain%20%3D%20this._domain_without_www(document.location.host)%3B%0D%0A%09var%20requestUrl%20%3D%20this.ADS_HOST%20%2B%20%22%3F%22%20%2B%0D%0A%09%09%22adtype%3Dtext%22%20%2B%0D%0A%09%09%22%26method%3Djs%22%20%2B%0D%0A%09%09%22%26advert%3D1%22%20%2B%0D%0A%09%09%22%26referer%3D%22%20%2B%20encodeURIComponent(document.location.protocol%20%2B%22%2F%2F%22%2B%20document.location.host%2B%22%2F%22)%20%2B%0D%0A%09%09%22%26ta_affiliateid%3D%22%20%2B%20this.affilateID%20%2B%0D%0A%09%09%22%26ta_insid%3D%22%20%2B%20this.instanceId%20%2B%0D%0A%09%09%22%26kw%3D%22%20%2B%20encodeURIComponent(keyword)%20%2B%0D%0A%09%09this.getEngineIdentityParam()%3B%0D%0A%09return%20requestUrl%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getCurrentKeyword%20%3D%20function()%7B%0D%0A%09var%20keyword%20%3D%20''%3B%0D%0A%0D%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0D%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0D%0A%0D%0A%09if(spell.length)%7B%0D%0A%09%09keyword%20%3D%20spell.text()%3B%0D%0A%09%7D%20else%20if(input.length)%7B%0D%0A%09%09keyword%20%3D%20input.val()%3B%0D%0A%09%7D%0D%0A%09return%20keyword%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FTRY%20TO%20GET%20ADS%20BY%20NEW%20KEYWORD%0D%0A%2F%2F_requestInProcess%3A%20false%2C%0D%0ACORE.prototype.sendAdRequest%20%3D%20function(requestUrl)%20%7B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%0D%0A%09u.log('SEND%20REQUEST'%2C%20%5Bthis.keyword%2C%20requestUrl%5D)%3B%0D%0A%0D%0A%09%24.ajax(%7B%0D%0A%09%09url%3A%20requestUrl%2C%0D%0A%09%09dataType%3A%20'json'%2C%0D%0A%09%09error%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function()%20%7B%0D%0A%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%2C%0D%0A%09%09success%3A%20(function(keyword)%20%7B%0D%0A%09%09%09return%20function(data)%20%7B%0D%0A%09%09%09%09var%20suggAdData%20%3D%20scope.suggModule.getAdsForKeyword(scope.keyword)%3B%0D%0A%09%09%09%09data%20%3D%20suggAdData.concat(data)%3B%0D%0A%0D%0A%09%09%09%09if(!data.length)%20%7B%0D%0A%09%09%09%09%09scope.showAllOriginalAd()%3B%0D%0A%09%09%09%09%09return%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09u.log('REQUEST%20SUCCESS'%2C%20%5Bscope.keyword%2C%20scope.suggModule%2C%20data%5D)%3B%0D%0A%09%09%09%09scope.data%20%3D%20data%3B%0D%0A%09%09%09%09scope.clearDynamicBlocksData()%3B%0D%0A%09%09%09%09scope.makeCovers()%3B%0D%0A%09%09%09%7D%3B%0D%0A%09%09%7D)(scope._keyword)%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showAllOriginalAd%20%3D%20function()%20%7B%0D%0A%09u.log('showAllOriginalAd()')%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B').show()%3B%0D%0A%09if(block.adSel)%7B%0D%0A%09%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible!important%3B')%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FADS%20REPLACEMENT%20PROCESS%0D%0ACORE.prototype.makeCovers%20%3D%20function()%20%7B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%0D%0A%09%09if(!this.isAdExist(block))%20%7B%0D%0A%09%09%09if(this.isOfficialSiteBlock(block))%7B%0D%0A%09%09%09%09this.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%09continue%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09%2F%2FORIGINAL%20SELECTOR%20IS%20A%20DOM%20ELEMENT%0D%0A%09%09this._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09this.makeCover(block%2C%20blockName)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdExist%20%3D%20function(block)%20%7B%0D%0A%09var%20origSel%20%3D%20%24(block.origSel)%3B%0D%0A%09return%20origSel.length%3B%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FPREPARE%20AND%20RENDER%20REPLACEMENT%20COVER%20(old%3A%20_prepareReplacement)%0D%0ACORE.prototype.makeCover%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09console.log('MAKE%20COVER'%2C%20blockName%2C%20%7BblockData%3A%20JSON.stringify(block.data)%7D)%3B%0D%0A%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(el.index('%23fakeAd')%20!%3D%20-1)%7B%0D%0A%09%09el%20%3D%20%24('%23fakeAd')%3B%0D%0A%09%7D%0D%0A%09var%20data%20%3D%20block.data%3B%0D%0A%0D%0A%09if%20(data.length)%20%7B%0D%0A%0D%0A%09%09var%20width%20%3D%20el.width()%3B%0D%0A%09%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%09%09%2F%2FREMOVE%20PREV%20BLOCK%0D%0A%09%09%24(block.coverSel).remove()%3B%0D%0A%0D%0A%09%09%2F%2FCREATE%20COVER%0D%0A%09%09var%20coverHeight%20%3D%20el.height()%3B%0D%0A%09%09if(block.newHeight)%7B%0D%0A%09%09%09coverHeight%20%3D%20block.newHeight%3B%0D%0A%09%09%09el.height(coverHeight)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09var%20cover%20%3D%20%24('%3Cdiv%20id%3D%22'%2B%20block.coverId%20%2B'%22%20class%3D%22adtrCover%22%20style%3D%22height%3A'%2B%20coverHeight%20%2B'px%3B%22%3E'%2B%20this._fillWithAds(block%2C%20blockName)%20%2B'%3C%2Fdiv%3E').css(%7B%0D%0A%09%09%09margin%3A%20this.getMargin(el)%2C%20padding%3A%20this.getPadding(el)%2C%0D%0A%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%7D)%3B%0D%0A%09%09cover.insertBefore(el)%3B%0D%0A%09%09el.addClass('hideOrig')%3B%0D%0A%09%09this.makeCoverMenu(block%2C%20cover%2C%20blockName)%3B%0D%0A%09%09this._compareRealAndCalcHeights(block)%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('showed%20without%20ad'%2C%20blockName)%3B%0D%0A%09%09this.showOriginalAdForBlock(block)%3B%0D%0A%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeCoverMenu%20%3D%20function(block%2C%20cover%2C%20blockName)%20%7B%0D%0A%20%20%20%20%20%20var%20clas%20%3D%20'atmAd'%3B%0D%0A%20%20%20%20%20%20var%20d%3B%0D%0A%0D%0A%20%20%20%20%20%20if%20(blockName%20%3D%3D%20'RIGHT')%20%7B%0D%0A%20%20%20%20%20%20%20%20clas%20%3D%20'atmAd-left'%3B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%3E%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%20else%20%7B%0D%0A%20%20%20%20%20%20%20%20d%20%3D%20%24('%3Cdiv%20class%3D%22'%2Bclas%2B'%22%3E%3Cdiv%20class%3D%22toggleTable%22%3E%3Cspan%3E%3Ca%20href%3D%22javascript%3A%3B%22%20class%3D%22closeAd%22%20style%3D%22color%3A%20rgb(216%2C%20216%2C%20216)%3B%22%3ESee%20Non%20AT-M%20ad%3C%2Fa%3E%3C%2Fspan%3E%26nbsp%3B%26nbsp%3B%3Cspan%3EAT-M%20Ad%3C%2Fspan%3E%3Cimg%20src%3D%22'%2Bdocument.location.protocol%2B'%2F%2Fads.adtrustmedia.com%2Fimages%2Finfo.ico%22%20alt%3D%22%22%20%2F%3E%3C%2Fdiv%3E%3C%2Fdiv%3E')%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FTABLE%0D%0A%20%20%20%20%20%20var%20t%20%3D%20%24(%22%3Ctable%20style%3D'visibility%3Ainherit%3B%20border-spacing%3A%201px%3B%20margin%3A%200px%3B%20border-collapse%3A%20collapse%3B%20%20background-color%3Agrey%3B%20z-index%3A100%3B'%20border%3D'1'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20style%3D'background-color%3Awhite%3B%20height%3A%2014px%3B%20padding%3A0px%203px%3B%20line-height%3A14px%3B'%3E%3Ca%20style%3D'width%3A58px%3B%20margin%3A0px%3B%20display%3Ablock%3B%20color%3Ablack%3B%20text-decoration%3Anone%3B%20text-align%3Aleft%3B%20font-weight%3Anormal%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20background-color%3Awhite%3B%20font-size%3A9px%3B'%20href%3D'https%3A%2F%2Fadtrustmedia.com%2Fwhyad.html'%20target%3D'_blank'%3EWhy%20this%20ad%3F%3C%2Fa%3E%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctr%20style%3D'border%3A%201px%20solid%20grey%3B%20border-collapse%3A%20collapse%3B'%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3Ctd%20class%3D'closeAd'%20style%3D'white-space%3Anowrap%3B%20color%3Ablack%3B%20background-color%3Awhite%3B%20cursor%3Apointer%3B%20padding%3A0px%203px%3B%20%20height%3A%2014px%3B%20line-height%3A14px%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A9px%3B'%3EClose%20this%20ad%3C%2Ftd%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftr%3E%5C%0D%0A%20%20%20%20%20%20%20%20%3C%2Ftable%3E%22)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20d.find('a.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20%20%20t.find('.closeAd').on('click'%2C%20function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20removeAd()%3B%0D%0A%20%20%20%20%20%20%20%20%7D)%3B%0D%0A%20%20%20%20%20%20d.append(t)%3B%0D%0A%0D%0A%20%20%20%20%20%20%2F%2FCLICK%20ON%20ATM%20AD%0D%0A%20%20%20%20%20%20d.find('.toggleTable').click(function()%20%7B%0D%0A%20%20%20%20%20%20%20%20%24(this).next().toggle()%3B%0D%0A%20%20%20%20%20%20%7D)%3B%0D%0A%0D%0A%20%20%20%20%20%20d.appendTo(cover)%3B%0D%0A%0D%0A%20%20%20%20%20%20var%20self%20%3D%20this%3B%0D%0A%20%20%20%20%20%20function%20removeAd()%20%7B%0D%0A%20%20%20%20%20%20%20%20%20%20cover.remove()%3B%0D%0A%20%20%20%20%20%20%20%20%20%20self.showOriginalAdForBlock(block)%3B%0D%0A%20%20%20%20%20%20%7D%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype._fillWithAds%20%3D%20function(block%2C%20blockName)%20%7B%0D%0A%09u.log('FILL%20COVER'%2C%20blockName%2C%20%5Bblock.data%5D)%3B%0D%0A%09var%20block_content%20%3D%20''%2C%0D%0A%09%09data%20%3D%20block.data%3B%0D%0A%0D%0A%09block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09var%20adTopPadding%20%3D%20block.adTopPadding%3B%0D%0A%09%09if(i%3D%3D%3D0)%20%7B%0D%0A%09%09%09adTopPadding%20%3D%20adTopPadding%2F2%3B%0D%0A%09%09%09if(blockName%20%3D%3D%20'RIGHT')%20adTopPadding%20%2B%3D%20this.MENU_BTN_SPACE%3B%0D%0A%09%09%7D%0D%0A%09%09var%20offsiteClass%20%3D%20(data%5Bi%5D.origin%20%3D%3D%20%22suggestion%22)%20%3F%20'class%3D%22official-site%22'%20%3A%20%22%22%3B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20style%3D'padding-top%3A%20%22%2BadTopPadding%2B%22px'%22%20%2B%20offsiteClass%20%2B%20%22%3E%22%2B%0D%0A%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bthis.boldKeyword(this.keyword%2C%20data%5Bi%5D.t)%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09return%20block_content%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._calcAdHeightForBlock%20%3D%20function(block)%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09if(!el.length)%20%7B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20width%20%3D%20el.width()%3B%0D%0A%09var%20height%20%3D%20el.height()%3B%0D%0A%0D%0A%0D%0A%09var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%20position%3Aabsolute%20!important%3B%20top%3A%20-10000px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%2F%2F%20var%20div%20%3D%20%24('%3Cdiv%20id%3D%22calc-'%2B%20block.coverId%20%2B'%22%20%20style%3D%22width%3A'%2B%20el.width()%20%2B'px%3B%22%20class%3D%22adtrCover%22%20%3E%3C%2Fdiv%3E'%0D%0A%09%09%09%09).css(%7B%0D%0A%09%09%09%09%09margin%3A%20this.getMargin(el)%2C%0D%0A%09%09%09%09%09padding%3A%20this.getPadding(el)%20%2C%0D%0A%09%09%09%09%09backgroundColor%3A%20el.css('background-color')%2C%0D%0A%09%09%09%09%09borderLeft%3A%20el.css('border-left')%2C%0D%0A%09%09%09%09%09borderRight%3A%20el.css('border-right')%0D%0A%09%09%09%09%7D)%3B%0D%0A%0D%0A%0D%0A%09var%20block_content%20%3D%20%22%3Col%20style%3D'padding%3A0%200px%204px%200px%3B'%3E%22%3B%0D%0A%09var%20data%20%3D%20this.data%3B%0D%0A%09for%20(var%20i%20%3D%200%3B%20i%20%3C%20data.length%3B%20i%2B%2B)%20%7B%0D%0A%09%09block_content%20%2B%3D%20%22%3Cli%20data-index%3D'%22%2Bi%2B%22'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'inner'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%20class%3D'vsc%20vsta'%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Ch3%3E%3Ca%20href%3D'%22%2Bdata%5Bi%5D.c%2B%22'%3E%22%2Bthis.boldKeyword(this.keyword%2C%20data%5Bi%5D.t)%2B%22%3C%2Fa%3E%3C%2Fh3%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cdiv%3E%3Cdiv%20class%3D'kv%20kva'%3E%3Ccite%3E%22%2Bdata%5Bi%5D.u%2B%22%3C%2Fcite%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%22%2B%0D%0A%09%09%09%09%09%09%09%22%3Cspan%20class%3D'ac'%3E%22%2Bdata%5Bi%5D.d%2B%22%3C%2Fspan%3E%22%2B%0D%0A%09%09%09%09%09%09%22%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fli%3E%22%3B%0D%0A%0D%0A%09%7D%0D%0A%09block_content%20%2B%3D%20%22%3C%2Fol%3E%22%3B%0D%0A%09div.html(block_content)%3B%0D%0A%09%24(this.MAIN_CONTAINER_SEL).append(div)%3B%0D%0A%0D%0A%09u.log('MAIN_CONTAINER_SEL'%2C%20%24(this.MAIN_CONTAINER_SEL).length)%3B%0D%0A%09var%20scope%20%3D%20this%3B%0D%0A%09div.find('li').each(function(i%2C%20li)%7B%0D%0A%09%09li%20%3D%20%24(li)%3B%0D%0A%09%09var%20index%20%3D%20li.data('index')%3B%0D%0A%09%09if(!scope.data%5Bindex%5D.h)%20scope.data%5Bindex%5D.h%20%3D%20%7B%7D%3B%0D%0A%09%09scope.data%5Bindex%5D.h%5Bblock.origSel%5D%20%3D%20li.height()%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09%2F%2F%20div.remove()%3B%0D%0A%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype._provideAdDataForBlock%20%3D%20function(block%2C%20blockName)%7B%0D%0A%09u.log('DATA%20FOR%20BLOCK'%2C%20blockName)%3B%0D%0A%0D%0A%09var%20addingLog%20%3D%20%5B%5D%3B%0D%0A%0D%0A%09var%20MAX_ADDITIONAL_PADDING%20%3D%2015%3B%0D%0A%0D%0A%09var%20providedIndexes%20%3D%20%5B%5D%3B%0D%0A%09var%20allData%20%3D%20this.data%3B%0D%0A%0D%0A%09var%20origEl%20%3D%20%24(block.origSel)%3B%0D%0A%09var%20blockHeight%20%3D%20origEl.height()%3B%0D%0A%09var%20adPadding%20%3D%20this.MIN_PADDING%3B%0D%0A%09var%20adHeightSumm%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'RIGHT')%20adHeightSumm%20%3D%20this.MENU_BTN_SPACE%3B%0D%0A%0D%0A%09this._calcAdHeightForBlock(block)%3B%0D%0A%0D%0A%09var%20indexesOfOtherBlocks%20%3D%20this._getDataIndexesOfOtherBlocks(block)%3B%0D%0A%0D%0A%09var%20allDataWasChecked%20%3D%20false%3B%0D%0A%09var%20i%20%3D%200%3B%0D%0A%09var%20numOfCheckedIndexes%20%3D%200%3B%0D%0A%0D%0A%09var%20maxOfAds%20%3D%20this.getMaxAdsForBlock(blockName)%3B%0D%0A%09var%20minOfAds%20%3D%20this.getMinAdsForBlock(blockName)%3B%0D%0A%0D%0A%09u.log('indexesOfOtherBlocks'%2C%20indexesOfOtherBlocks)%3B%0D%0A%09var%20numOfFreeIndexes%20%3D%20allData.length%20-%20indexesOfOtherBlocks.length%3B%0D%0A%09var%20ttt%20%3D%200%3B%0D%0A%09var%20adHeight%3B%0D%0A%09while(i%20%3C%20allData.length%20%26%26%20ttt%3C30%20%26%26%20providedIndexes.length%3CmaxOfAds)%7B%0D%0A%0D%0A%09%09var%20indexIsFree%20%3D%20(indexesOfOtherBlocks.indexOf(i)%20%3D%3D%20-1)%3B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09var%20anywayAd%20%3D%20this.isAdAnyway(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(indexIsFree%20%26%26%20acceptableAd)%7B%0D%0A%0D%0A%09%09%09adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%0D%0A%09%09%09%2F%2Fif%20we%20can%20fit%20ad%20to%20block%20then%20add%20it%0D%0A%09%09%09addingLog.push(%7B%0D%0A%09%09%09%09i%3A%20i%2C%0D%0A%09%09%09%09t%3A%20allData%5Bi%5D.t%2C%0D%0A%09%09%09%09free%3A%20(blockHeight-adHeightSumm)%2C%0D%0A%09%09%09%09adPad%3A%20(adHeight%2Bthis.MIN_PADDING)%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%09var%20enoughSpace%20%3D%20(blockHeight%20%3E%3D%20adHeightSumm%20%2B%20adHeight%20%2B%20adPadding)%3B%0D%0A%09%09%09if(enoughSpace%20%7C%7C%20providedIndexes.length%20%3C%20minOfAds%20%7C%7C%20anywayAd)%7B%0D%0A%09%09%09%09if(!enoughSpace)%7B%0D%0A%09%09%09%09%09u.log('add%20more%20ads%20couse%20min%20ads%20required%20in%20block'%2C%20blockName%2C%20providedIndexes.length)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09%09providedIndexes.push(i)%3B%0D%0A%09%09%09%7D%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09ttt%2B%2B%3B%0D%0A%09%09i%2B%2B%3B%0D%0A%09%7D%0D%0A%09u.log('addingLog'%2C%20addingLog)%3B%0D%0A%0D%0A%09var%20freeSpace%20%3D%20blockHeight%20-%20adHeightSumm%3B%0D%0A%09var%20additionalPadding%20%3D%20freeSpace%20%2F%20(providedIndexes.length)%3B%0D%0A%0D%0A%09u.log('blockHeight'%2C%20blockHeight%2C%20'adHeightSumm'%2C%20adHeightSumm%2C%20'freeSpace'%2C%20freeSpace)%3B%0D%0A%0D%0A%09u.log('additionalPadding'%2C%20additionalPadding%2C%20'acceptable'%2C%20(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200))%3B%0D%0A%09if(additionalPadding%20%3C%20MAX_ADDITIONAL_PADDING%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09adPadding%20%2B%3D%20additionalPadding%3B%0D%0A%09%7D%20else%20if(providedIndexes.length%20%3C%20maxOfAds%20%26%26%20additionalPadding%20%3E%200)%7B%0D%0A%09%09var%20alreadyOccupiedAdIndexes%20%3D%20indexesOfOtherBlocks.concat(providedIndexes)%3B%0D%0A%09%09var%20shortestAdIndex%20%3D%20this._getShortestAdIndex(allData%2C%20alreadyOccupiedAdIndexes%2C%20block)%3B%0D%0A%09%09if(shortestAdIndex%20%3E%20-1)%7B%0D%0A%09%09%09adHeight%20%3D%20allData%5BshortestAdIndex%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09adHeightSumm%20%2B%3D%20adHeight%20%2B%20adPadding%3B%0D%0A%09%09%09providedIndexes.push(shortestAdIndex)%3B%0D%0A%09%09%7D%20else%20%7B%0D%0A%0D%0A%09%09%7D%0D%0A%0D%0A%09%09u.log('shortestAdIndex'%2C%20shortestAdIndex%2C%20'orig%20resize'%2C%20adHeightSumm%20-%20blockHeight)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%20else%20%7B%0D%0A%09%09u.log('shortened%20block'%2C%20blockName%2C%20blockHeight%2C%20adHeightSumm)%3B%0D%0A%09%09block.newHeight%20%3D%20adHeightSumm%3B%0D%0A%09%7D%0D%0A%0D%0A%09var%20providedData%20%3D%20%5B%5D%3B%0D%0A%09for(var%20j%3D0%3B%20j%3CprovidedIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09providedData.push(allData%5BprovidedIndexes%5Bj%5D%5D)%3B%0D%0A%09%7D%0D%0A%09u.log('providedData'%2C%20providedData%2C%20'providedIndexes'%2C%20providedIndexes%2C%20'adPadding'%2C%20adPadding)%3B%0D%0A%09block.data%20%3D%20providedData%3B%0D%0A%09block.dataIndexes%20%3D%20providedIndexes%3B%0D%0A%09block.adTopPadding%20%3D%20adPadding%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getDataIndexesOfOtherBlocks%20%3D%20function(block)%7B%0D%0A%09var%20indexes%20%3D%20%5B%5D%3B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09if(this.BLOCKS%5Bi%5D.origSel%20!%3D%20block.origSel)%7B%0D%0A%09%09%09var%20otherBlockIndexes%20%3D%20this.BLOCKS%5Bi%5D.dataIndexes%3B%0D%0A%09%09%09for(var%20j%3D0%3B%20j%3CotherBlockIndexes.length%3B%20j%2B%2B)%7B%0D%0A%09%09%09%09if(indexes.indexOf(otherBlockIndexes%5Bj%5D)%20%3D%3D%20-1)%7B%0D%0A%09%09%09%09%09indexes.push(otherBlockIndexes%5Bj%5D)%3B%0D%0A%09%09%09%09%7D%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%09return%20indexes%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._getShortestAdIndex%20%3D%20function(allData%2C%20excludedIndexes%2C%20block)%7B%0D%0A%09var%20minHeight%20%3D%201000000%3B%0D%0A%09var%20minHeightAdIndex%20%3D%20-1%3B%0D%0A%0D%0A%09for(var%20i%3D0%3B%20i%3CallData.length%3B%20i%2B%2B)%7B%0D%0A%09%09var%20acceptableAd%20%3D%20this.isAdAcceptable(block%2C%20allData%5Bi%5D)%3B%0D%0A%09%09if(!acceptableAd)%20continue%3B%0D%0A%09%09if(excludedIndexes.indexOf(i)%20%3D%3D%20-1)%7B%0D%0A%09%09%09var%20adHeight%20%3D%20allData%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09%09if(adHeight%20%3C%20minHeight)%7B%0D%0A%09%09%09%09minHeight%20%3D%20adHeight%3B%0D%0A%09%09%09%09minHeightAdIndex%20%3D%20i%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%7D%0D%0A%0D%0A%09return%20minHeightAdIndex%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.clearDynamicBlocksData%20%3D%20function()%7B%0D%0A%09for(var%20i%20in%20this.BLOCKS)%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5Bi%5D%3B%0D%0A%09%09block.data%20%3D%20%5B%5D%3B%0D%0A%09%09block.dataIndexes%20%3D%20%5B%5D%3B%0D%0A%09%09block.adTopPadding%20%3D%200%3B%0D%0A%09%09

block.oldHeight%20%3D%20false%3B%0D%0A%09%09block.newHeight%20%3D%20false%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._replicateBlock%20%3D%20function(donor%2C%20recipient)%7B%0D%0A%09recipient.data%20%3D%20donor.data%3B%0D%0A%09recipient.dataIndexes%20%3D%20donor.dataIndexes%3B%0D%0A%09recipient.adTopPadding%20%3D%20donor.adTopPadding%3B%0D%0A%09recipient.oldHeight%20%3D%20%24(recipient.origSel).height()%3B%0D%0A%09recipient.newHeight%20%3D%20donor.newHeight%20%7C%7C%20%24(donor.origSel).height()%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype._compareRealAndCalcHeights%20%3D%20function(block)%7B%0D%0A%09var%20cover%20%3D%20%24(block.coverSel)%3B%0D%0A%09var%20orig%20%3D%20%24(block.origSel)%3B%0D%0A%0D%0A%09cover.find('li').each(function(i)%7B%0D%0A%09%09var%20el%20%3D%20%24(this)%3B%0D%0A%09%09var%20title%20%3D%20el.find('h3%20a').text()%3B%0D%0A%09%09var%20calcSize%20%3D%20block.data%5Bi%5D.h%5Bblock.origSel%5D%3B%0D%0A%09%09u.log(title%2C%20el.height()%2C%20calcSize)%3B%0D%0A%09%7D)%3B%0D%0A%0D%0A%09u.log('block%20sizes'%2C%20%7B%0D%0A%09%09origReal%3A%20orig.height()%2C%0D%0A%09%09coverReal%3A%20cover.height()%2C%0D%0A%09%09newHeight%3A%20block.newHeight%0D%0A%09%7D)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMaxAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20maxOfAds%20%3D%20100%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mxt)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mxr)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mxb)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.mxb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.max_top_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.max_right_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.max_bottom_ads)%7B%0D%0A%09%09maxOfAds%20%3D%20this.engineParams.max_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20maxOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMinAdsForBlock%20%3D%20function%20(blockName)%20%7B%0D%0A%09var%20minOfAds%20%3D%200%3B%0D%0A%09if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.mnt)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnt%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.mnr)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnr%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.mnb)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.mnb%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'TOP'%20%26%26%20this.engineParams.min_top_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_top_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'RIGHT'%20%26%26%20this.engineParams.min_right_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_right_ads%3B%0D%0A%09%7D%20else%20if(blockName%20%3D%3D%20'BOTTOM'%20%26%26%20this.engineParams.min_bottom_ads)%7B%0D%0A%09%09minOfAds%20%3D%20this.engineParams.min_bottom_ads%3B%0D%0A%09%7D%0D%0A%09return%20minOfAds%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.getPadding%20%3D%20function(el)%20%7B%0D%0A%09var%20right%20%3D%20el.css('padding-right')%2C%0D%0A%09%09left%20%3D%20el.css('padding-left')%3B%0D%0A%09return%20%5B0%2C%20right%2C%200%2C%20left%5D.join('%20')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getMargin%20%3D%20function(el)%20%7B%0D%0A%09var%20margin%20%3D%20el.css('margin')%3B%0D%0A%09if(margin%20%3D%3D%3D%20'')%20%7B%0D%0A%09%09var%20top%20%3D%20el.css('margin-top')%2C%0D%0A%09%09%09right%20%3D%20el.css('margin-right')%2C%0D%0A%09%09%09bott%20%3D%20el.css('margin-bottom')%2C%0D%0A%09%09%09left%20%3D%20el.css('margin-left')%3B%0D%0A%09%09return%20%5Btop%2C%20right%2C%20bott%2C%20left%5D.join('%20')%3B%0D%0A%09%7D%0D%0A%09return%20margin%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.getEngineIdentityParam%20%3D%20function()%20%7B%0D%0A%09return%20'%26e%3D'%2Bthis.engineCode%2B'_s'%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocksCycle%20%3D%20function(block%2C%20blockName%2C%20showOrigAd)%7B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09this.origAdCheckerCounter%5BblockName%5D%20%3D%200%3B%0D%0A%09console.log('this.origAdChecker'%2C%20this.origAdChecker)%3B%0D%0A%09if(this.origAdChecker%5BblockName%5D)%7B%0D%0A%09%09console.log('clearInterval'%2C%20this.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09clearInterval(this.origAdChecker%5BblockName%5D)%3B%0D%0A%09%7D%0D%0A%09this.origAdChecker%5BblockName%5D%20%3D%20setInterval(function()%7B%0D%0A%0D%0A%09%09if(self.isAdExist(block))%20%7B%0D%0A%09%09%09if(showOrigAd)%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7Delse%20if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09if(self.isOfficialSiteBlock(block))%7B%0D%0A%0D%0A%09%09%09%09self.makeFakeOrigAd(block)%3B%0D%0A%09%09%09%09self._provideAdDataForBlock(block%2C%20blockName)%3B%0D%0A%09%09%09%09self.makeCover(block%2C%20blockName)%3B%0D%0A%09%09%09%7D%20else%20%7B%0D%0A%09%09%09%09self.showOriginalAdForBlock(block)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%0D%0A%09%09if(self.origAdCheckerCounter%5BblockName%5D%20%3E%207)%7B%0D%0A%09%09%09console.log('clearInterval'%2C%20blockName%2C%20self.origAdCheckerCounter%5BblockName%5D%2C%20self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%09clearInterval(self.origAdChecker%5BblockName%5D)%3B%0D%0A%09%09%7D%0D%0A%0D%0A%09%09self.origAdCheckerCounter%5BblockName%5D%2B%2B%3B%0D%0A%09%7D%2C%201000)%3B%0D%0A%09console.log(blockName%2C%20this.origAdChecker%5BblockName%5D)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%0D%0ACORE.prototype.multipleTryToFindBlocks%20%3D%20function(showOrigAd)%20%7B%0D%0A%09this.origAdCheckerCounter%20%3D%20%7B%7D%3B%0D%0A%09this.origAdChecker%20%3D%20%7B%7D%3B%0D%0A%09var%20self%20%3D%20this%3B%0D%0A%09for(var%20blockName%20in%20this.BLOCKS)%20%7B%0D%0A%09%09var%20block%20%3D%20this.BLOCKS%5BblockName%5D%3B%0D%0A%09%09this.multipleTryToFindBlocksCycle(block%2C%20blockName%2C%20showOrigAd)%3B%0D%0A%09%7D%0D%0A%7D%3B%0D%0A%0D%0A%2F%2FOfficial%20site%20feature%0D%0ACORE.prototype.isAdAcceptable%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20!(%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09%09)%20%7C%7C%0D%0A%09%09%09%09(%0D%0A%09%09%09%09%09!this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09%09this.isElFake(%24(block.origSel))%0D%0A%09%09%09%09)%0D%0A%09%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isAdAnyway%20%3D%20function(block%2C%20ad)%7B%0D%0A%09return%20(%0D%0A%09%09%09(%0D%0A%09%09%09%09this.isOfficialSiteBlock(block)%20%26%26%0D%0A%09%09%09%09this.isOfficialSiteAd(ad)%0D%0A%09%09%09)%0D%0A%09%09)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteBlock%20%3D%20function(block)%7B%0D%0A%09return%20(block.name%20%3D%3D%20'TOP')%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isOfficialSiteAd%20%3D%20function(ad)%7B%0D%0A%09return%20(ad.origin%20%3D%3D%20%22suggestion%22)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.makeFakeOrigAd%20%3D%20function(block)%20%7B%0D%0A%09var%20parentEl%20%3D%20%24(block.parentSel)%3B%0D%0A%09if(!parentEl.length)%20%7B%0D%0A%09%09u.log('makeFakeOrigAd%20!parentEl.length')%3B%0D%0A%09%09return%3B%0D%0A%09%7D%0D%0A%09var%20origId%20%3D%20block.origSel.replace('%23'%2C%20'')%3B%0D%0A%09var%20fakeEl%20%3D%20%24('%3Cdiv%20id%3D%22fakeAd%22%3E')%3B%0D%0A%09parentEl.prepend(fakeEl)%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.isElFake%20%3D%20function(el)%7B%0D%0A%09return%20(el.index('%23fakeAd')%20!%3D%20-1)%3B%0D%0A%7D%3B%0D%0A%0D%0A%0D%0ACORE.prototype.SuggestionModule%20%20%3D%20function(instanceId)%20%7B%0D%0A%09this.data%20%3D%20%7B%7D%3B%0D%0A%09this.enable%20%3D%20true%3B%0D%0A%09this.addedBookmarks%20%3D%20%7B%7D%3B%0D%0A%0D%0A%09this.setConfig%20%3D%20function(data)%7B%0D%0A%09%09this.data%20%3D%20data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getConfig%20%3D%20function()%7B%0D%0A%09%09return%20this.data%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.getAdsForKeyword%20%3D%20function(keyword)%7B%0D%0A%09%09if(!this.data%20%7C%7C%20!this.data.s)%20return%20%5B%5D%3B%0D%0A%09%09var%20suggestions%20%3D%20this.findSuggestionsForKeyword(keyword%2C%2010)%3B%0D%0A%09%09return%20this.generateAdData(suggestions)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.findSuggestionsForKeyword%20%3D%20function(keyword%2C%20maxAmount)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Cthis.data.s.length%20%26%26%20result.length%20%3C%3D%20maxAmount%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20this.data.s%5Bi%5D%3B%0D%0A%09%09%09if(this.isSuggestionMatched(sugg%2C%20keyword))%7B%0D%0A%09%09%09%09result.push(sugg)%3B%0D%0A%09%09%09%7D%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.isSuggestionMatched%20%3D%20function(sugg%2C%20keyword)%7B%0D%0A%09%09keyword%20%3D%20keyword.toLowerCase()%3B%0D%0A%09%09var%20k%20%3D%20keyword.indexOf(sugg.k.toLowerCase())%20%3D%3D%3D%200%3B%0D%0A%09%09var%20s%20%3D%20sugg.s.toLowerCase().indexOf(keyword)%20%3D%3D%3D%200%3B%0D%0A%09%09return%20k%20%26%26%20s%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.generateAdData%20%3D%20function(suggestions)%7B%0D%0A%09%09var%20result%20%3D%20%5B%5D%3B%0D%0A%09%09for(var%20i%3D0%3B%20i%3Csuggestions.length%3B%20i%2B%2B)%7B%0D%0A%09%09%09var%20sugg%20%3D%20suggestions%5Bi%5D%3B%0D%0A%09%09%09var%20diplayUrl%20%3D%20(sugg.v)%20%3F%20sugg.v%20%3A%20sugg.u.replace(%2F.*%5C%2F%5C%2F(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%241')%3B%20%2F%2Fwww.sales.target.com%0D%0A%09%09%09var%20title%20%3D%20(sugg.t)%20%3F%20sugg.t%20%3A%20this.capitaliseFirstLetter(sugg.u.replace(%2F.*%5C%2F%5C%2F(www%5C.)%3F(%5B%5Cw.%5D%2B)%5C.(%5B%5E%3F%5C%2F%5D*).*%2F%2C%20'%242'))%3B%20%2F%2FSales.target%0D%0A%0D%0A%09%09%09result.push(%7B%0D%0A%09%09%09%09%22t%22%3A%20title%2C%0D%0A%09%09%09%09%22c%22%3A%20sugg.u%2C%0D%0A%09%09%09%09%22u%22%3A%20diplayUrl%20%2B%20'%20-%20'%20%2B%20this.data.t%2C%0D%0A%09%09%09%09%22d%22%3A%20sugg.d%2C%0D%0A%09%09%09%09%22r%22%3A%201%2C%0D%0A%09%09%09%09%22origin%22%3A%20%22suggestion%22%0D%0A%09%09%09%7D)%3B%0D%0A%09%09%7D%0D%0A%09%09return%20result%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%09this.capitaliseFirstLetter%20%3D%20function(string)%7B%0D%0A%09%09return%20string.charAt(0).toUpperCase()%20%2B%20string.slice(1)%3B%0D%0A%09%7D%3B%0D%0A%0D%0A%0D%0A%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.coreStyles%20%20%3D%20function()%20%7B%0D%0A%09var%20a%20%3D%20'%3Cstyle%20id%3D%22adtrCoreStyle%22%3E%5C%0D%0A%09%3C%2Fstyle%3E'%3B%0D%0A%09return%20a%3B%0D%0A%7D%3B%0D%0A%0D%0ACORE.prototype.boldKeyword%20%3D%20function(keyword%2C%20string)%7B%0D%0A%09keyword%20%3D%20keyword.replace(%2F%5B%5E%5Cw%5Cs%5D*%2Fg%2C%20'')%3B%0D%0A%09var%20regexp%20%3D%20new%20RegExp('('%2Bkeyword%2B')'%2C%20%22ig%22)%3B%0D%0A%09string%20%3D%20string.replace(regexp%2C%20'%3Cb%3E%241%3C%2Fb%3E')%3B%0D%0A%09return%20string%3B%0D%0A%7D%3B%0D%0AENGINE.prototype.BLOCKS%20%3D%20%7B%0A%0A%09%09'TOP'%3A%20%7B%0A%09%09%09origSel%3A%20'%23google-adsense-srp-container.google-adsense-top%2C%20%23sponsored-listings%20%23google_adsense%2C%20%23canvas%2B%23google_adsense%2C%20%23fakeAd'%2C%0A%09%09%09coverSel%3A%20'%23serp_bigmap_top_atmcover'%2C%0A%09%09%09name%3A%20'TOP'%2C%0A%09%09%09coverId%3A%20'serp_bigmap_top_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23google-adsense-srp-container.google-adsense-top%20iframe%2C%20%23sponsored-listings%20%23google_adsense%20iframe%2C%20%23canvas%2B%23google_adsense%20iframe'%2C%0A%09%09%09intervalId%3A%20false%2C%0A%09%09%09parentSel%3A%20'%23sponsored-listings'%0A%09%09%7D%2C%0A%0A%09%09'BOTTOM'%3A%20%7B%0A%09%09%09origSel%3A%20'%23google-adsense-srp-container.google-adsense-bottom%2C%20%23results%3E%23google_adsense'%2C%0A%09%09%09coverSel%3A%20'%23serp_bigmap_bot_atmcover'%2C%0A%09%09%09name%3A%20'BOTTOM'%2C%0A%09%09%09coverId%3A%20'serp_bigmap_bot_atmcover'%2C%0A%09%09%09data%3A%20%5B%5D%2C%0A%09%09%09keyword%3A%20''%2C%0A%09%09%09dataIndexes%3A%20%5B%5D%2C%0A%09%09%09adTopPadding%3A%200%2C%0A%09%09%09oldHeight%3A%20false%2C%0A%09%09%09newHeight%3A%20false%2C%0A%09%09%09adSel%3A%20'%23google-adsense-srp-container.google-adsense-bottom%20iframe%2C%20%23results%3E%23google_adsense%20iframe'%2C%0A%09%09%09intervalId%3A%20false%0A%09%09%7D%0A%0A%7D%3B%0A%0A%0AENGINE.prototype.INPUT_SEL%20%3D%20'%23query%2C%20%23key%2C%20%23search-terms'%3B%0AENGINE.prototype.SPELL_SEL%20%3D%20'%23spell%20a%20b'%3B%0AENGINE.prototype.MAIN_CONTAINER_SEL%20%3D%20'%23left-column%2C%20%23container%2C%20.scrollable-pane'%3B%0AENGINE.prototype.engineCode%20%3D%20'y'%3B%0A%0AENGINE.prototype.getCurrentKeyword%20%3D%20function()%7B%0A%09var%20keyword%20%3D%20''%3B%0A%0A%09var%20input%20%3D%20%24(this.INPUT_SEL)%3B%0A%09var%20spell%20%3D%20%24(this.SPELL_SEL).eq(0)%3B%0A%0A%09if(spell.length)%7B%0A%09%09keyword%20%3D%20spell.text()%3B%0A%09%7D%20else%20if(input.length)%7B%0A%09%09keyword%20%3D%20input.val()%3B%0A%09%7D%0A%09keyword%20%3D%20keyword.replace(%2F%5B%5E%5Cw%5Cs%5D*%2Fg%2C%20'')%3B%0A%09return%20keyword%3B%0A%7D%3B%0A%0AENGINE.prototype.STYLES%20%3D%20%20function()%7B%0A%09var%20a%20%3D%20%22%20%3Cstyle%20id%3D'adtrStyles'%3E%5C%0A%09.adtrCover%20%7B%20position%3Arelative%20!important%3B%20border%3A%201px%20solid%20%23DDDDDD%3B%20border-left%3A%20none%3B%20background-color%3A%20white%20!important%3B%20font-family%3A%20arial%2C%20sans-serif%3B%7D%20%5C%0A%09%23results%20.adtrCover%20%7Bborder-left%3A%20none%3B%20border-right%3A%20none%3B%7D%20%5C%0A%09.adtrCover.ie8%20%7Bborder-left%3Anone%3B%7D%20%5C%0A%09.adtrCover%20ol%20%7B%20list-style-type%3A%20none%3B%20%20margin-left%3A%200px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20%7B%20padding%3A%2011px%208px%200%208px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%3Afirst-child%20%7B%20padding%3A%2010px%208px%200%208px%3B%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20%7B%20%20%20margin%3A%200px%3Bfont-weight%3A%20normal%3B%20%7D%20%5C%0A%09.adtrCover%20ol%20li%20h3%20a%20%7B%20color%3A%23067AB4%3B%20text-decoration%3Anone%3B%20font-size%3A%2014px%3B%20font-family%3A%20arial%2C%20sans-serif%3B%7D%20%5C%0A%09.adtrCover%20.kv.kva%20cite%20%7B%20color%3A%23093%3B%20font-style%3A%20normal%3B%20font-weight%3A%20normal%3B%20font-size%3A%2012px%3B%7D%20%5C%0A%09.ac%20%7Bline-height%3A%2017px%3B%20font-size%3A%2012px%3B%7D%5C%0A%20%20%22%2Bthis.ALL_BLOCKS_SELECTOR().orig%2B%22%2C%20%7B%20%5C%0A%20%20%20%20visibility%3A%20hidden%3B%20%5C%0A%20%20%20%20overflow%3A%20hidden%3B%20%5C%0A%20%20%7D%20%5C%0A%20%20.adtrCover-closeBtn%7B%20%5C%0A%20%20%20%20cursor%3A%20pointer%3B%20%5C%0A%20%20%20%20padding%3A%200%202px%202px%202px%3B%20%5C%0A%20%20%20%20font-size%3A%2012px%3B%20%5C%0A%20%20%20%20text-align%3A%20center%3B%20%5C%0A%20%20%20%20position%3A%20absolute%3B%20%5C%0A%20%20%20%20height%3A%2012px%3B%20%5C%0A%20%20%20%20width%3A%2033px%3B%20%5C%0A%20%20%20%20border%3A%201px%20solid%20lightblue%3B%20%5C%0A%20%20%20%20background-color%3A%20rgba(255%2C%20255%2C%20255%2C%200.6)%3B%20%5C%0A%20%20%20%20display%3A%20inline-block%3B%20%5C%0A%20%20%20%20right%3A%201px%3B%20%5C%0A%20%20%20%20top%3A%203px%3B%20%5C%0A%20%20%7D%5C%0A%20%20.adtrCover%20.closeAd%7B%20%5C%0A%09text-decoration%3A%20underline%3B%20%5C%0A%20%20%7D%5C%0A%20%20.atmAd%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20right%3A0px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20a%20%7Bfont-size%3A%208px%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20right%3A0px%3B%20%7D%20%5C%0A%20%20.hideOrig%20%7B%20position%3Aabsolute%20!important%3B%20left%3A-99999px%3B%7D%20%5C%0A%20%20.atmAd-left%20%7B%20position%3Aabsolute%3B%20top%3A0px%3B%20left%3A9px%3B%20height%3A%2013px%3B%20line-height%3A%2013px%3B%20cursor%3Apointer%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20a%20%7Bfont-size%3A%208px%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20img%20%7B%20vertical-align%3Amiddle%3B%20height%3A11px%3B%20width%3A11px%3B%20padding%3A%200px%200px%200px%201px%3B%20margin%3A%200px%3B%20border%3A%20none%3B%7D%20%5C%0A%09.atmAd-left%20.toggleTable%20span%20%7B%20margin%3A0%203px%200%200%3B%20vertical-align%3Abaseline%3B%20font-family%3A%20Arial%2CVerdana%2CHelvetica%2Csans-serif%3B%20font-size%3A%208px%3B%20display%3A%20inline-block%3B%20color%3A%20rgb(216%2C%20216%2C%20216)%3B%20white-space%3A%20nowrap%3B%7D%20%5C%0A%09.atmAd-left%20table%20%7B%20display%3Anone%3B%20position%3Aabsolute%3B%20top%3A17px%3B%20left%3A0px%3B%20%7D%20%5C%0A%20%20%3C%2Fstyle%3E%22%3B%0A%20%20return%20a%3B%0A%7D%3B%0A%0A%2F%2Foriginal%20ad%20renders%20by%20two%20steps%2C%20at%20first%20step%20it%20allways%20equal%2027px%20and%20at%20second%20step%20it%20has%20it's%20real%20height%0ACORE.prototype.isAdExist%20%3D%20function(block)%20%7B%0A%09var%20origSel%20%3D%20%24(block.origSel)%3B%0A%09return%20origSel.length%20%26%26%20origSel.height()%20%3E%2030%3B%0A%7D%3B%0D%0A%0D%0A%0D%0AGoogleChrome.prototype.ff%20%3D%20function()%7B%0D%0A%09console.log('oogleChrome.prototype.ff')%3B%0D%0A%7D%3B%0D%0AFirefox.prototype.showOriginalAdForBlock%20%3D%20function(block)%20%7B%0D%0A%09var%20el%20%3D%20%24(block.origSel)%3B%0D%0A%09if(!el.length)%20return%3B%0D%0A%09el.removeClass('hideOrig')%3B%0D%0A%09el.css(%7Bheight%3A%20''%7D)%3B%0D%0A%09el.attr('style'%2C%20el.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09var%20ad%20%3D%20%24(block.adSel)%3B%0D%0A%09ad.attr('style'%2C%20ad.attr('style')%20%2B'%3Bvisibility%3A%20visible%20!important%3B')%3B%0D%0A%09%24('.adtr').remove()%3B%0D%0A%7D%3B%0D%0Afunction%20IE%20()%20%7B%7D%0D%0AIE.prototype.getPadding%20%3D%20function(el)%20%7B%0D%0A%09if(isIE8)%20return%3B%0D%0A%09var%20top%20%3D%20'0px'%2C%0D%0A%09%09right%20%3D%20el.css('padding-right')%2C%0D%0A%09%09bott%20%3D%20el.css('padding-bottom')%2C%0D%0A%09%09left%20%3D%20el.css('padding-left')%3B%0D%0A%09return%20%5Btop%2C%20right%2C%20bott%2C%20left%5D.join('%20')%3B%0D%0A%7D%3B%0D%0Afunction%20Browser%20(affiliateID%2C%20instanceID)%20%7B%0A%09var%20browser%3B%0A%09%2F%2Fif%20called%20with%20a%20%22new%22%20keyword%0A%09if%20(this.constructor%20%3D%3D%20Browser)%20%7B%0A%09%09%2F%2Fpicking%20specific%20browser%0A%09%09browser%20%3D%20this.pickBrowser()%3B%0A%0A%09%09browser.affiliateID%20%3D%20affiliateID%3B%0A%09%09browser.instanceID%20%3D%20instanceID%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error(%22Browser%20is%20a%20constructor%20function%22)%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%0A%0ABrowser.prototype.pickBrowser%20%3D%20function()%20%7B%0A%09%2F%2Fchecking%20browser%0A%09var%20ischrome%20%3D%20typeof(chrome)%20%3D%3D%20'object'%2C%0A%09%09firefox%20%3D%20typeof(chrome)%20%3D%3D%20'string'%2C%0A%09%09ie%20%3D%20navigator.userAgent.indexOf(%22Trident%22)%20!%3D%3D%20-1%2C%0A%09%09browser%20%3D%20null%3B%0A%0A%09if%20(ischrome)%20%7B%0A%09%09browser%20%3D%20new%20GoogleChrome()%3B%0A%09%7D%20else%20if%20(firefox)%20%7B%0A%09%09browser%20%3D%20new%20Firefox()%3B%0A%09%7D%20else%20if%20(ie)%20%7B%0A%09%09browser%20%3D%20new%20IE()%3B%0A%09%7D%20else%20%7B%0A%09%09throw%20new%20Error('unknown%20browser')%3B%0A%09%7D%0A%0A%09return%20browser%3B%0A%7D%3B%0A%0A%0A%0D%0A%2F%2Fsimply%20extending%20specific%20browser%20classes%20with%20basic%20class%2C%20which%20holds%20default%20browser%20methods%0A%0A%2F%2Freturns%20browser%20object%20(one%20of%20Chrome%2C%20FF%2C%20IE)%0A%0Aif(typeof(pc)%20!%3D%20'undefined')%7B%0A%09var%20affiliateID%20%3D%20pc.affiliateID%3B%0A%09var%20instanceID%20%3D%20pc.instanceId%3B%0A%09var%20engineParams%20%3D%20pc.engineParams%3B%0A%7D%0A%0Aif(%20typeof(affiliateID)%20!%3D%20'undefined'%20)%7B%0A%09%2F%2FaffiliateID%20predefined%20by%20extension%0A%09var%20browser%20%3D%20new%20Browser(affiliateID%2C%20instanceID)%3B%0A%09browser.init(instanceID%2C%20affiliateID%2C%20engineParams)%3B%0A%09Util.log('started%20browser'%2C%20affiliateID%2C%20instanceID)%3B%0A%7D%20else%20%7B%0A%09var%20browser%20%3D%20new%20Browser()%3B%0A%09var%20Engine%20%3D%20browser%3B%0A%09Util.log('prepare%20Engine')%3B%0A%7D%0A%0A%0A%0A%0A\""
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF:64bit: - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.6.2: C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.6.2: C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin: C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Petr\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@t.garena.com/garenatalk: C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@hola.org/vlc,version=1.7.860: C:\Users\Petr\AppData\Local\Hola\firefox\app\vlc [2015.05.16 13:01:42 | 000,000,000 | ---D | M]
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Petr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET NOD32 ANTIVIRUS\MOZILLA THUNDERBIRD
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.05.12 16:07:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2013.10.13 15:26:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Petr\AppData\Roaming\Mozilla\Extensions
[2015.03.26 16:12:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\m68i5m0m.default\extensions
[2015.03.26 16:12:56 | 000,000,000 | ---D | M] (Seznam lištička) -- C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\m68i5m0m.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2015.03.26 16:09:02 | 000,000,000 | ---D | M] (Hola Better Internet) -- C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\m68i5m0m.default\extensions\jid1-4P0kohSJxU1qGg@jetpack
[2015.03.30 19:44:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015.03.30 19:44:15 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig\1.3.14_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd\1.2.13_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.12_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.33_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.506.11355_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\
CHR - Extension: No name found = C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak\1.7.1_0\

O1 HOSTS File: ([2014.07.15 17:06:04 | 000,000,923 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 apps.facebook.com/candycrush/?fb_source=bookmark&ref=bookmarks&count=3&fb_bmpos=4_3
O2:64bit: - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (Avast Software s.r.o.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (ArcPluginIEBHO Class) - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (Avast Software s.r.o.)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {EA837F48-5AD1-443e-AE34-FFE03CBF3099} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (COMODO)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [AdobeCEPServiceManager] C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [VICTORY Gaming Keyboard] C:\Program Files (x86)\Gaming Keyboard\Monitor.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2840795496-512860511-4266877744-1000..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-2840795496-512860511-4266877744-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9:64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{220B7BE7-D68B-4F87-B193-5AA48639BCA0}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18:64bit: - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\System32\Userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\launcher.exe: Debugger - "C:\Program Files (x86)\AVG PC TuneUp 2014\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\launcher.exe: Debugger - "C:\Program Files (x86)\AVG PC TuneUp 2014\TUAutoReactivator64.exe" File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{6730b671-2af3-11e3-8c37-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6730b671-2af3-11e3-8c37-806e6f6e6963}\Shell\AutoRun\command - "" = E:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.l3codecp - l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2015.05.17 12:46:00 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Petr\Desktop\OTL.exe
[2015.05.17 11:44:58 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2015.05.17 11:44:58 | 000,000,000 | ---D | C] -- C:\rsit
[2015.05.16 16:39:50 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Roaming\Tera_Awesomium
[2015.05.15 17:32:08 | 000,000,000 | -H-D | C] -- C:\VTRoot
[2015.05.15 15:13:51 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2015.05.15 15:13:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2015.05.15 15:13:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan
[2015.05.13 07:38:55 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015.05.13 07:38:55 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015.05.13 07:23:42 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2015.05.13 07:23:42 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2015.05.13 07:23:35 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2015.05.13 07:23:35 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015.05.13 07:23:35 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015.05.13 07:23:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2015.05.13 07:23:35 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2015.05.13 07:23:35 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2015.05.13 07:23:34 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2015.05.13 07:23:34 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2015.05.13 07:23:34 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2015.05.13 07:23:34 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2015.05.13 07:23:33 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015.05.13 07:23:33 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015.05.13 07:23:33 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2015.05.13 07:23:32 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2015.05.13 07:23:32 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015.05.13 07:23:32 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015.05.13 07:23:32 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015.05.13 07:23:32 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015.05.13 07:23:32 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015.05.13 07:23:32 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2015.05.13 07:23:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2015.05.13 07:23:31 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015.05.13 07:23:31 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015.05.13 07:23:31 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2015.05.13 07:23:30 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2015.05.13 07:23:30 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015.05.13 07:23:30 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2015.05.13 07:23:30 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015.05.13 07:23:30 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2015.05.13 07:23:29 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015.05.13 07:23:29 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2015.05.13 07:23:29 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015.05.13 07:23:28 | 006,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015.05.13 07:23:28 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2015.05.13 07:23:28 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015.05.13 07:23:28 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2015.05.13 07:23:27 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2015.05.13 07:23:27 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015.05.13 07:23:27 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015.05.13 07:23:25 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\services.exe
[2015.05.13 07:23:12 | 005,569,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015.05.13 07:23:12 | 001,728,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015.05.13 07:23:12 | 001,254,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2015.05.13 07:23:12 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2015.05.13 07:23:10 | 003,989,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015.05.13 07:23:10 | 003,934,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015.05.13 07:23:10 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015.05.13 07:23:10 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2015.05.13 07:23:10 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2015.05.13 07:23:10 | 000,635,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2015.05.13 07:23:09 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015.05.13 07:23:09 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015.05.13 07:23:09 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015.05.13 07:23:09 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tracerpt.exe
[2015.05.13 07:23:09 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tracerpt.exe
[2015.05.13 07:23:09 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015.05.13 07:23:09 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015.05.13 07:23:09 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015.05.13 07:23:09 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015.05.13 07:23:09 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sechost.dll
[2015.05.13 07:23:09 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015.05.13 07:23:09 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2015.05.13 07:23:09 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2015.05.13 07:23:09 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\typeperf.exe
[2015.05.13 07:23:08 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015.05.13 07:23:08 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015.05.13 07:23:08 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015.05.13 07:23:08 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015.05.13 07:23:08 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015.05.13 07:23:08 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015.05.13 07:23:08 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015.05.13 07:23:08 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2015.05.13 07:23:08 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\typeperf.exe
[2015.05.13 07:23:08 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2015.05.13 07:23:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015.05.13 07:23:08 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015.05.13 07:23:08 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015.05.13 07:23:08 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskperf.exe
[2015.05.13 07:23:08 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskperf.exe
[2015.05.13 07:23:08 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015.05.13 07:23:08 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015.05.13 07:23:08 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015.05.13 07:23:08 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015.05.13 07:23:07 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015.05.13 07:23:07 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015.05.13 07:23:07 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015.05.13 07:23:07 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015.05.13 07:23:07 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015.05.13 07:23:07 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015.05.13 07:23:07 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015.05.13 07:23:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015.05.13 07:23:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015.05.13 07:23:07 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015.05.13 07:23:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015.05.13 07:22:51 | 001,647,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2015.05.13 07:22:47 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
[2015.05.13 07:22:47 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
[2015.05.13 07:22:47 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jnwmon.dll
[2015.05.13 07:22:46 | 002,543,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2015.05.13 07:22:44 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2015.05.13 07:22:44 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2015.05.13 07:22:43 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2015.05.13 07:22:43 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdbinst.exe
[2015.05.13 07:22:42 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdbinst.exe
[2015.05.13 07:22:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2015.05.12 16:08:32 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Roaming\AVAST Software
[2015.05.12 16:07:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2015.05.12 16:07:16 | 000,442,264 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSP.sys
[2015.05.12 16:07:16 | 000,137,288 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015.05.12 16:07:16 | 000,089,944 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2015.05.12 16:07:15 | 001,047,320 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015.05.12 16:07:15 | 000,093,528 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015.05.12 16:07:11 | 000,364,472 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\aswBoot.exe
[2015.05.12 16:06:56 | 000,043,112 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015.05.12 16:05:58 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015.05.12 16:05:07 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2015.05.12 16:05:04 | 005,499,960 | ---- | C] (Avast Software s.r.o.) -- C:\Users\Petr\Desktop\avast_free_antivirus_setup_online.exe
[2015.05.11 10:46:27 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Roaming\raidcall
[2015.05.11 10:46:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCall
[2015.05.11 10:46:19 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RaidCall
[2015.05.11 10:46:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RaidCall
[2015.05.10 17:43:56 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Local\TERA
[2015.05.10 16:49:22 | 001,761,992 | ---- | C] (ESET) -- C:\Users\Petr\Desktop\eset_nod32_antivirus_live_installer_.exe
[2015.05.01 20:14:57 | 000,000,000 | ---D | C] -- D:\Documents\MK-LOL
[2015.05.01 20:14:56 | 000,000,000 | ---D | C] -- D:\Documents\MKJogo
[2015.04.18 19:45:17 | 000,000,000 | ---D | C] -- D:\Documents\DayZ
[2015.04.18 19:45:17 | 000,000,000 | ---D | C] -- C:\Users\Petr\AppData\Local\DayZ
[1 C:\Users\Petr\AppData\Local\*.tmp files -> C:\Users\Petr\AppData\Local\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2015.05.17 12:52:49 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015.05.17 12:47:01 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015.05.17 12:46:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Petr\Desktop\OTL.exe
[2015.05.17 12:28:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1d042414c0351a8.job
[2015.05.17 12:20:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015.05.17 12:19:47 | 000,446,095 | ---- | M] () -- C:\Users\Petr\Desktop\60a335d2ae9ab437917863b6e4f15189.jpg
[2015.05.17 11:46:25 | 000,020,880 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.05.17 11:46:25 | 000,020,880 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.05.17 11:37:12 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015.05.17 11:36:55 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1d042414bcc1439.job
[2015.05.17 11:36:38 | 000,000,198 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2015.05.17 11:36:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015.05.17 11:35:55 | 2116,612,095 | -HS- | M] () -- C:\hiberfil.sys
[2015.05.16 01:03:18 | 000,057,124 | ---- | M] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2015.05.16 00:21:16 | 003,202,017 | ---- | M] () -- C:\Users\Petr\Desktop\Manian - Welcome to the Club(Official Video).mp3
[2015.05.15 21:48:06 | 001,437,679 | ---- | M] () -- C:\Users\Petr\Desktop\The Kitty Cat Dance..mp3
[2015.05.15 18:38:51 | 004,274,208 | ---- | M] () -- C:\Users\Petr\Desktop\Different Heaven & EH!DE - My Heart.mp3
[2015.05.15 16:47:58 | 000,001,966 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015.05.15 15:13:51 | 000,001,007 | ---- | M] () -- C:\Users\Petr\Desktop\SpeedFan.lnk
[2015.05.15 15:13:50 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2015.05.14 06:48:59 | 001,788,684 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015.05.14 06:48:59 | 000,816,158 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2015.05.14 06:48:59 | 000,657,196 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015.05.14 06:48:59 | 000,191,466 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2015.05.14 06:48:59 | 000,123,008 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015.05.14 06:43:22 | 005,080,792 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015.05.13 07:23:43 | 000,460,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2015.05.13 07:23:43 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2015.05.13 07:23:35 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2015.05.13 07:23:35 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015.05.13 07:23:35 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015.05.13 07:23:35 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2015.05.13 07:23:35 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2015.05.13 07:23:35 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2015.05.13 07:23:34 | 000,720,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2015.05.13 07:23:34 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2015.05.13 07:23:34 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2015.05.13 07:23:34 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2015.05.13 07:23:33 | 002,052,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015.05.13 07:23:33 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015.05.13 07:23:33 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2015.05.13 07:23:32 | 000,968,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2015.05.13 07:23:32 | 000,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015.05.13 07:23:32 | 000,664,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015.05.13 07:23:32 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015.05.13 07:23:32 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015.05.13 07:23:32 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015.05.13 07:23:32 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2015.05.13 07:23:32 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2015.05.13 07:23:31 | 002,125,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015.05.13 07:23:31 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015.05.13 07:23:31 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2015.05.13 07:23:30 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2015.05.13 07:23:30 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015.05.13 07:23:30 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015.05.13 07:23:30 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2015.05.13 07:23:29 | 000,633,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015.05.13 07:23:29 | 000,490,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2015.05.13 07:23:29 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015.05.13 07:23:28 | 006,025,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015.05.13 07:23:28 | 001,359,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2015.05.13 07:23:28 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015.05.13 07:23:28 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2015.05.13 07:23:27 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015.05.13 07:23:27 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015.05.13 07:23:25 | 000,328,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\services.exe
[2015.05.13 07:23:12 | 005,569,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015.05.13 07:23:12 | 001,728,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015.05.13 07:23:12 | 001,254,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2015.05.13 07:23:12 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2015.05.13 07:23:10 | 003,989,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015.05.13 07:23:10 | 003,934,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015.05.13 07:23:10 | 001,461,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015.05.13 07:23:10 | 001,162,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015.05.13 07:23:10 | 000,879,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2015.05.13 07:23:10 | 000,879,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2015.05.13 07:23:10 | 000,635,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2015.05.13 07:23:10 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015.05.13 07:23:10 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015.05.13 07:23:10 | 000,404,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tracerpt.exe
[2015.05.13 07:23:10 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tracerpt.exe
[2015.05.13 07:23:10 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015.05.13 07:23:10 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sechost.dll
[2015.05.13 07:23:10 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2015.05.13 07:23:09 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015.05.13 07:23:09 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015.05.13 07:23:09 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015.05.13 07:23:09 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015.05.13 07:23:09 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015.05.13 07:23:09 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015.05.13 07:23:09 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015.05.13 07:23:09 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2015.05.13 07:23:09 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015.05.13 07:23:09 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015.05.13 07:23:09 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015.05.13 07:23:09 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\typeperf.exe
[2015.05.13 07:23:09 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015.05.13 07:23:09 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2015.05.13 07:23:09 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\typeperf.exe
[2015.05.13 07:23:09 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2015.05.13 07:23:09 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015.05.13 07:23:09 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015.05.13 07:23:09 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\diskperf.exe
[2015.05.13 07:23:09 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\diskperf.exe
[2015.05.13 07:23:09 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015.05.13 07:23:08 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015.05.13 07:23:08 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015.05.13 07:23:08 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015.05.13 07:23:08 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015.05.13 07:23:08 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015.05.13 07:23:08 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015.05.13 07:23:07 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015.05.13 07:23:07 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015.05.13 07:23:07 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015.05.13 07:23:07 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015.05.13 07:23:07 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015.05.13 07:23:07 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015.05.13 07:23:07 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015.05.13 07:23:07 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015.05.13 07:23:07 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015.05.13 07:23:07 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015.05.13 07:23:07 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015.05.13 07:23:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015.05.13 07:23:07 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015.05.13 07:22:51 | 001,647,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2015.05.13 07:22:47 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
[2015.05.13 07:22:47 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
[2015.05.13 07:22:47 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jnwmon.dll
[2015.05.13 07:22:46 | 002,543,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2015.05.13 07:22:46 | 001,195,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UMDF\WpdMtpDr.dll
[2015.05.13 07:22:44 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2015.05.13 07:22:44 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2015.05.13 07:22:43 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2015.05.13 07:22:43 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sdbinst.exe
[2015.05.13 07:22:43 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sdbinst.exe
[2015.05.13 07:22:42 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2015.05.12 16:07:10 | 000,442,264 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSP.sys
[2015.05.12 16:07:10 | 000,364,472 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\aswBoot.exe
[2015.05.12 16:07:10 | 000,272,248 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015.05.12 16:07:10 | 000,093,528 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015.05.12 16:07:10 | 000,089,944 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2015.05.12 16:07:10 | 000,065,736 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015.05.12 16:07:10 | 000,029,168 | ---- | M] () -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015.05.12 16:07:05 | 001,047,320 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015.05.12 16:07:00 | 000,137,288 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015.05.12 16:06:56 | 000,043,112 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015.05.12 16:05:04 | 005,499,960 | ---- | M] (Avast Software s.r.o.) -- C:\Users\Petr\Desktop\avast_free_antivirus_setup_online.exe
[2015.05.11 10:46:20 | 000,001,007 | ---- | M] () -- C:\Users\Petr\Desktop\RaidCall.lnk
[2015.05.11 10:45:52 | 005,801,376 | ---- | M] () -- C:\Users\Petr\Desktop\raidcall_v7.3.6.exe
[2015.05.11 06:57:34 | 000,000,202 | ---- | M] () -- C:\Windows\tasks\AutoKMSDaily.job
[2015.05.10 16:49:32 | 001,761,992 | ---- | M] (ESET) -- C:\Users\Petr\Desktop\eset_nod32_antivirus_live_installer_.exe
[2015.05.10 00:17:31 | 000,031,758 | ---- | M] () -- C:\Users\Petr\Desktop\11128363_859560794114166_7419899683097993934_n[1].jpg
[2015.05.01 20:14:56 | 000,000,058 | ---- | M] () -- C:\Windows\JQHApp.dat
[2015.05.01 15:17:03 | 000,124,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015.05.01 15:16:41 | 000,102,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015.04.26 18:17:03 | 000,000,000 | ---- | M] () -- C:\Users\Petr\AppData\Local\{F14FBD2C-5782-4B32-B391-94AB68EDC27E}
[2015.04.26 18:17:03 | 000,000,000 | ---- | M] () -- C:\Users\Petr\AppData\Local\{7881F437-35AC-4C2E-ADD8-710C7FF9620A}
[2015.04.21 18:50:03 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2015.04.21 18:09:57 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2015.04.20 17:26:53 | 000,029,695 | ---- | M] () -- C:\Users\Petr\Desktop\10489641_546008335526260_6762548785495902480_n.jpg
[2015.04.18 20:37:47 | 000,224,830 | ---- | M] () -- C:\Users\Petr\Desktop\Peťa Lefan.png
[1 C:\Users\Petr\AppData\Local\*.tmp files -> C:\Users\Petr\AppData\Local\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2015.05.17 12:52:49 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015.05.17 12:19:47 | 000,446,095 | ---- | C] () -- C:\Users\Petr\Desktop\60a335d2ae9ab437917863b6e4f15189.jpg
[2015.05.16 00:21:13 | 003,202,017 | ---- | C] () -- C:\Users\Petr\Desktop\Manian - Welcome to the Club(Official Video).mp3
[2015.05.15 21:48:04 | 001,437,679 | ---- | C] () -- C:\Users\Petr\Desktop\The Kitty Cat Dance..mp3
[2015.05.15 18:38:31 | 004,274,208 | ---- | C] () -- C:\Users\Petr\Desktop\Different Heaven & EH!DE - My Heart.mp3
[2015.05.15 17:32:01 | 000,057,124 | ---- | C] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2015.05.15 15:13:51 | 000,001,007 | ---- | C] () -- C:\Users\Petr\Desktop\SpeedFan.lnk
[2015.05.15 15:13:50 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2015.05.12 16:07:43 | 000,001,966 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015.05.12 16:07:16 | 000,272,248 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015.05.12 16:07:16 | 000,065,736 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015.05.12 16:07:15 | 000,029,168 | ---- | C] () -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015.05.11 10:46:20 | 000,001,007 | ---- | C] () -- C:\Users\Petr\Desktop\RaidCall.lnk
[2015.05.11 10:45:28 | 005,801,376 | ---- | C] () -- C:\Users\Petr\Desktop\raidcall_v7.3.6.exe
[2015.05.10 21:17:10 | 000,031,758 | ---- | C] () -- C:\Users\Petr\Desktop\11128363_859560794114166_7419899683097993934_n[1].jpg
[2015.04.26 18:17:03 | 000,000,000 | ---- | C] () -- C:\Users\Petr\AppData\Local\{F14FBD2C-5782-4B32-B391-94AB68EDC27E}
[2015.04.26 18:17:03 | 000,000,000 | ---- | C] () -- C:\Users\Petr\AppData\Local\{7881F437-35AC-4C2E-ADD8-710C7FF9620A}
[2015.04.20 17:26:53 | 000,029,695 | ---- | C] () -- C:\Users\Petr\Desktop\10489641_546008335526260_6762548785495902480_n.jpg
[2015.04.18 20:37:47 | 000,224,830 | ---- | C] () -- C:\Users\Petr\Desktop\Peťa Lefan.png
[2015.01.09 17:28:00 | 000,001,075 | ---- | C] () -- C:\Users\Petr\Dokumenty – zástupce.lnk
[2014.08.29 03:47:43 | 000,000,498 | ---- | C] () -- C:\Users\Petr\Backup.lic
[2014.07.17 19:09:13 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2014.06.09 17:44:47 | 000,000,058 | ---- | C] () -- C:\Windows\JQHApp.dat
[2014.04.15 19:05:19 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014.04.15 19:05:19 | 000,076,152 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014.04.10 22:16:19 | 000,000,000 | -HS- | C] () -- C:\Users\Petr\AppData\Local\LumaEmu
[2014.02.19 19:02:43 | 000,045,270 | ---- | C] () -- C:\Users\Petr\AppData\Roaming\room_v3.dat
[2013.10.09 17:15:56 | 000,000,000 | ---- | C] () -- C:\Users\Petr\regbcm
[2013.10.02 06:23:02 | 000,000,593 | ---- | C] () -- C:\Users\Petr\Sdílený prostor.lnk
[2013.10.02 04:53:18 | 000,000,184 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2013.10.02 04:52:54 | 000,078,848 | ---- | C] () -- C:\Windows\KMSEmulator.exe
[2013.10.02 04:09:16 | 000,217,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013.10.02 02:30:33 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.10.02 02:23:27 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2013.10.02 02:12:18 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013.10.02 02:12:18 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2013.10.02 02:12:18 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2013.10.02 02:07:55 | 001,763,398 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.10.02 02:01:36 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015.02.13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015.02.13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2015.04.18 01:19:28 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.minecraft
[2014.10.24 16:37:57 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.mono
[2014.01.26 19:34:28 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.technic
[2015.04.13 10:33:25 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Arc
[2015.05.16 00:24:52 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Audacity
[2015.05.12 16:08:32 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\AVAST Software
[2014.04.13 13:35:36 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\AVG
[2014.12.13 21:11:09 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Awesomium
[2014.08.29 13:57:45 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Battle.net
[2013.11.06 09:08:11 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\DAEMON Tools Lite
[2015.04.11 14:55:55 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Dropbox
[2014.09.17 17:32:46 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Enterbrain
[2014.01.17 18:56:11 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Fatshark
[2014.02.19 18:54:21 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Garena
[2014.02.19 18:48:20 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\GarenaPlus
[2014.01.25 22:05:39 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\LolClient
[2013.11.10 17:00:32 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade
[2013.11.19 15:25:23 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade Warband
[2013.11.11 17:32:29 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade With Fire and Sword
[2014.07.23 08:54:48 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\My Battle for Middle-earth Files
[2013.12.10 14:43:15 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Need for Speed World
[2014.04.13 13:35:01 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\OpenCandy
[2014.11.04 16:40:18 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Origin
[2015.02.11 19:24:10 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\puush
[2015.05.11 10:46:27 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\raidcall
[2014.09.16 20:59:14 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\RenPy
[2013.11.02 14:41:22 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\RIFT
[2014.01.25 00:26:12 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Riot Games
[2013.11.25 17:12:49 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Rogue Legacy
[2015.04.11 14:58:58 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Seznam.cz
[2014.05.06 07:21:34 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\skyz
[2014.04.10 14:38:56 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SpaceEngineers
[2014.11.02 16:49:22 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SpieleEntwicklungsKombinat
[2014.07.13 21:01:02 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs
[2014.12.09 17:42:14 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SPORE
[2014.11.18 17:40:33 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Steam
[2014.12.20 12:14:17 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\StunlockStudios
[2014.08.24 22:14:38 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\TeamViewer
[2015.05.16 16:40:21 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Tera_Awesomium
[2015.03.15 00:13:06 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\TS3Client
[2015.01.23 18:24:17 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Tunngle
[2013.10.10 17:35:09 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Unity
[2013.11.10 15:25:19 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Wargaming.net
[2015.01.08 22:46:27 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\WindOfLuckArena

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,032,568 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.10.02 03:26:57 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.10.02 03:26:57 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.10.02 04:53:18 | 000,000,198 | ---- | C] () -- C:\Windows\Tasks\AutoKMS.job
[2013.10.02 04:53:18 | 000,000,202 | ---- | C] () -- C:\Windows\Tasks\AutoKMSDaily.job
[2014.07.13 21:02:08 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2015.02.06 21:15:40 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d042414bcc1439.job
[2015.02.06 21:15:40 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d042414c0351a8.job

< >

< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2015.02.03 05:50:56 | 000,190,976 | ---- | M] (Microsoft Corporation) MD5=00D0F7BA3B27126A3E25B540979A9F39 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_d492bbeccaa14239\cryptsvc.dll
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2014.07.07 04:06:31 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=19D511CC455C19DE1ADF60E6C39C85B6 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18526_none_d41cb8b3b175406a\cryptsvc.dll
[2015.02.03 05:30:56 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=1CD76A83B9E8E9A5A3519B39E28354D9 -- C:\Windows\SysNative\cryptsvc.dll
[2015.02.03 05:30:56 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=1CD76A83B9E8E9A5A3519B39E28354D9 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_d4021b35b189f3e7\cryptsvc.dll
[2014.10.30 04:14:18 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=3031B5DC2A58A7BCE6651EA9B7DD6390 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22908_none_789f60191223613f\cryptsvc.dll
[2013.05.10 06:49:59 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=33ADF6E0853AB39EA1723BE82842C1D3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll
[2013.05.13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013.07.09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2012.06.02 07:32:25 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=456107D69D4EE850A559434F19EFEE65 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_d2beeccacd6d6c07\cryptsvc.dll
[2015.02.03 05:12:14 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=49474B3E37969AF4B5C076F42B623AFF -- C:\Windows\SysWOW64\cryptsvc.dll
[2015.02.03 05:12:14 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=49474B3E37969AF4B5C076F42B623AFF -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18741_none_77e37fb1f92c82b1\cryptsvc.dll
[2013.10.05 04:25:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=509D31797A4B8A3D6ED78A330B19A919 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_d46d4138cabe2596\cryptsvc.dll
[2014.07.07 03:40:07 | 000,143,872 | ---- | M] (Microsoft Corporation) MD5=623E143F2DF17C0106A9988F5D7DC878 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18526_none_77fe1d2ff917cf34\cryptsvc.dll
[2014.07.07 04:06:07 | 000,190,976 | ---- | M] (Microsoft Corporation) MD5=63A15BA9875364C4147B226CB70468B3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22736_none_d49b8778ca9af94c\cryptsvc.dll
[2014.07.07 04:06:07 | 000,190,976 | ---- | M] (Microsoft Corporation) MD5=63A15BA9875364C4147B226CB70468B3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22908_none_d4bdfb9cca80d275\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013.07.09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012.06.04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013.05.10 07:49:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=7FDC4626B01106A8EF328C88C7C0DEE3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll
[2013.05.11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2009.07.14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2014.07.07 03:40:42 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=90BFC30E730A6760F1FEE2A55F8AB029 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22736_none_787cebf5123d8816\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012.06.02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013.05.11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2015.02.03 05:31:49 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=B97E16D36DB7B7DD22C97857506FA58A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22948_none_787420691243d103\cryptsvc.dll
[2012.06.02 07:25:12 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=BAF19B633933A9FB4883D27D66C39E9A -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_d22a7e2db457eb07\cryptsvc.dll
[2013.05.10 07:18:53 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=CA13C4F92BEE66DB48E58AB3223DDF6E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll
[2013.05.13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2013.05.10 07:06:21 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=E122AA1C9A3CC46FF9DDDE46E5EB0C58 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2013.10.05 03:52:03 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=F2D9242C3BBD1C36467FCAE1AE01733F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22473_none_784ea5b51260b460\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2014.05.30 10:00:12 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=04F6C08B30C599D301CE8530A6F6A703 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22705_none_0505e8508c7f766f\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011.11.17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
[2015.01.14 08:04:46 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=1E31700D9C9E0FB79999D02A8437482C -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18717_none_04737e137368226b\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18443_none_044f07757384196d\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18496_none_041bf8b773a9f127\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18526_none_0467aa1173712ab7\lsass.exe
[2014.04.12 04:19:05 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=204F3F58212B3E422C90BD9691A2DF28 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18637_none_045ddc5573785d26\lsass.exe
[2014.09.19 11:42:18 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=341655B216721D89CADE9DEA2F33872F -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18606_none_047d4bcf7360effc\lsass.exe
[2015.03.06 07:32:14 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=395CAE11172BEBB0253895E8B5F82BFA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22983_none_04ad6c288cc21d97\lsass.exe
[2015.01.29 05:18:39 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=43FE6F74D2D43443CF2279613FA0A516 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18738_none_045ede85737773a4\lsass.exe
[2015.05.13 07:23:42 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=4C3FAC816925F73A34AD52F1F7C0A7EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\lsass.exe
[2013.09.25 03:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=4D71227301DD8D09097B9E4CC6527E5A -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_042b9307739f26ed\lsass.exe
[2015.01.10 09:09:08 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=55C62F66528A7BF58EA964B70BCB3D96 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22920_none_04eb4ad28c9429ec\lsass.exe
[2015.01.27 05:56:02 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=5B63917A1BE4728D8111850CDEF252F1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22943_none_04d8abd88ca1add3\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22653_none_04cdd63a8ca9d24f\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22712_none_04f817868c8a465b\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22736_none_04e678d68c96e399\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22807_none_0507eaca8c7da644\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22843_none_04d8a9f28ca1b0ac\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22923_none_04ee4bb08c9175f1\lsass.exe
[2014.04.12 04:31:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=6598EBC4D209318EBD81F76833ECBEDB -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22925_none_04f04c448c8fa89f\lsass.exe
[2015.02.03 05:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=7554A1B82B4A222FD4CC292ABD38A558 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18741_none_044d0c937385de34\lsass.exe
[2012.08.24 19:43:36 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=77119F1F9B492B260030C34F9BE327FA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22099_none_04a88ce28cc4eb33\lsass.exe
[2012.06.04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2015.05.13 07:23:09 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=9262D6E2C239EDD6D87B080F2BCCEC9F -- C:\Windows\SysNative\lsass.exe
[2015.05.13 07:23:09 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=9262D6E2C239EDD6D87B080F2BCCEC9F -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\lsass.exe
[2015.03.06 07:41:46 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=B6C7729936AAF8E0697F0A7DCA82CED8 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18779_none_04349f1f7396fcbf\lsass.exe
[2014.09.19 11:47:37 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=B84317193B6A29F5F5DCF538C34FDCED -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22814_none_04fa1a008c887630\lsass.exe
[2015.05.13 07:23:42 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BB9C1B746086558899935E3333CD4580 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\lsass.exe
[2012.06.02 07:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17940_none_044c26dd7386a58a\lsass.exe
[2015.01.10 08:47:33 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C8152B86C0F12E61B0AD5C95751547D3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18714_none_04707d35736ad666\lsass.exe
[2015.04.15 15:54:02 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=CA4FC33FB22D92368A0B221092B46374 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\lsass.exe
[2015.02.03 05:50:23 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=CBB80CC43E683F929F8D5E50330F7BA6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22948_none_04ddad4a8c9d2c86\lsass.exe
[2011.11.17 08:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe
[2015.05.13 07:23:09 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D52C700254E7FBD9BF6D817BA7BA5309 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\lsass.exe
[2015.04.15 15:54:02 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=DCCDD65A4E68360E5CF57AFC864C64E0 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\lsass.exe
[2015.01.15 10:09:15 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=E0105F3B5B1C4B0F5B3D788A13504EC6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18719_none_04757ea773665519\lsass.exe
[2013.09.25 03:08:17 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=F021DAFB1F87616FCEBA159C2ED7042F -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_04c503168cb026a0\lsass.exe
[2014.05.30 10:07:57 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=F23812F9F7B130854E4BC0389F7C688C -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18489_none_0429c981739f213b\lsass.exe

< MD5 for: NDIS.SYS >
[2012.08.22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012.08.22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012.08.22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009.07.14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011.03.11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011.03.11 08:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011.03.11 08:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2015.04.15 15:54:02 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=0B6514A14631E41DE4D6D40D1C80BE68 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_0a0e1c38300e82ce\smss.exe
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2015.04.15 15:54:02 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=206A6B71AC09D9F7651F0A8B015676C7 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_0af2e09b48e8bf7e\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22653_none_0abdf375491039d3\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22780_none_0a9a84b9492b3ec8\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22908_none_0af90a3548e32446\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22921_none_0adc685748f9aac7\smss.exe
[2014.04.12 04:31:44 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=3442A918386D4716D74C661543151746 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22923_none_0ade68eb48f7dd75\smss.exe
[2013.03.19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2015.02.03 05:30:42 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=63D3C30B497347495B8EA78A38188969 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18741_none_0a3d29ce2fec45b8\smss.exe
[2013.03.19 05:20:12 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=7180204786A9DED8723B2D8CF3CDD388 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_08a94e494c0cfd0a\smss.exe
[2015.01.29 05:18:52 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=83C0199B7C06AC3C33212E1A0DC2260E -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18738_none_0a4efbc02fdddb28\smss.exe
[2015.02.03 05:50:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=8CD5A97B8D155718D357B2D9BC6B113D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22948_none_0acdca854903940a\smss.exe
[2013.08.29 03:04:30 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=B2B31D4C79EFD883097FA24D02E79C12 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22436_none_0ad6905f48fd53a8\smss.exe
[2015.01.27 05:56:16 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=B75198D88A34994DE1E4D9F2286DF759 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22943_none_0ac8c91349081557\smss.exe
[2013.08.02 07:06:34 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CB5DA3E44456D1084BCD87F5B1B3152B -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe
[2015.05.13 07:23:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CF8DC00FA29243A347AD4B605AFFF1E5 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23040_none_0ac5a057490afc94\smss.exe
[2015.05.13 07:23:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=DA5EF2CC0764BE7097BAFA9CAF903FE8 -- C:\Windows\SysNative\smss.exe
[2015.05.13 07:23:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=DA5EF2CC0764BE7097BAFA9CAF903FE8 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18839_none_0a4ffdf02fdcf1a6\smss.exe
[2013.03.19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe
[2013.03.19 05:19:03 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=FA64733BD65F52712F0545F56FDB4BE6 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_0838504e32dc743c\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.09.08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013.09.07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
[2013.11.26 13:34:34 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=F55B41AA6114568AC558ADBABDA85620 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22525_none_11c3cc3c962abcc3\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014.03.04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014.07.17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014.07.17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014.07.16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[8 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[8 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[33 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[77 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2015.04.18 01:19:28 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.minecraft
[2014.10.24 16:37:57 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.mono
[2014.01.26 19:34:28 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\.technic
[2015.03.31 10:48:50 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Adobe
[2015.03.31 07:00:56 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Apple Computer
[2015.04.13 10:33:25 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Arc
[2013.10.02 02:28:31 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\ATI
[2015.05.16 00:24:52 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Audacity
[2015.05.12 16:08:32 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\AVAST Software
[2014.04.13 13:35:36 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\AVG
[2014.12.13 21:11:09 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Awesomium
[2014.08.29 13:57:45 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Battle.net
[2013.11.06 09:08:11 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\DAEMON Tools Lite
[2015.04.11 14:55:55 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Dropbox
[2014.09.17 17:32:46 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Enterbrain
[2014.01.17 18:56:11 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Fatshark
[2014.02.19 18:54:21 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Garena
[2014.02.19 18:48:20 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\GarenaPlus
[2014.08.29 03:44:45 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\InstallShield
[2014.01.25 22:05:39 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\LolClient
[2013.10.13 15:45:19 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Macromedia
[2009.07.14 17:36:38 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Media Center Programs
[2015.01.08 22:26:19 | 000,000,000 | --SD | M] -- C:\Users\Petr\AppData\Roaming\Microsoft
[2013.11.10 17:00:32 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade
[2013.11.19 15:25:23 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade Warband
[2013.11.11 17:32:29 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mount&Blade With Fire and Sword
[2013.10.13 15:26:35 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Mozilla
[2014.07.23 08:54:48 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\My Battle for Middle-earth Files
[2013.12.10 14:43:15 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Need for Speed World
[2014.04.13 13:35:01 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\OpenCandy
[2014.11.04 16:40:18 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Origin
[2015.02.11 19:24:10 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\puush
[2015.05.11 10:46:27 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\raidcall
[2014.09.16 20:59:14 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\RenPy
[2013.11.02 14:41:22 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\RIFT
[2014.01.25 00:26:12 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Riot Games
[2013.11.25 17:12:49 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Rogue Legacy
[2014.03.17 22:16:21 | 000,000,000 | RH-D | M] -- C:\Users\Petr\AppData\Roaming\SecuROM
[2015.04.11 14:58:58 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Seznam.cz
[2015.05.17 14:02:25 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Skype
[2014.05.06 07:21:34 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\skyz
[2014.04.10 14:38:56 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SpaceEngineers
[2014.11.02 16:49:22 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SpieleEntwicklungsKombinat
[2014.07.13 21:01:02 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs
[2014.12.09 17:42:14 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\SPORE
[2014.11.18 17:40:33 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Steam
[2014.12.20 12:14:17 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\StunlockStudios
[2014.08.24 22:14:38 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\TeamViewer
[2015.05.16 16:40:21 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Tera_Awesomium
[2015.03.15 00:13:06 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\TS3Client
[2015.01.23 18:24:17 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Tunngle
[2013.10.10 17:35:09 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Unity
[2015.05.17 13:36:54 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\vlc
[2013.11.10 15:25:19 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\Wargaming.net
[2015.01.08 22:46:27 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\WindOfLuckArena
[2013.10.02 04:42:42 | 000,000,000 | ---D | M] -- C:\Users\Petr\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2014.07.15 20:53:24 | 001,592,398 | ---- | M] (TeamExtreme) -- C:\Users\Petr\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe
[2014.01.17 19:30:55 | 000,069,253 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe
[2014.04.21 07:36:40 | 000,695,296 | ---- | M] (AnjoCaido) -- C:\Users\Petr\AppData\Roaming\.minecraft\mods\Minecraft-1.5.2.exe
[2015.04.02 20:38:14 | 043,382,072 | ---- | M] (Dropbox, Inc.) -- C:\Users\Petr\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2015.04.02 20:43:06 | 000,265,856 | ---- | M] (Dropbox, Inc.) -- C:\Users\Petr\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2015.04.02 20:38:20 | 001,032,456 | ---- | M] (Dropbox, Inc.) -- C:\Users\Petr\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2013.10.02 02:13:34 | 000,010,134 | R--- | M] () -- C:\Users\Petr\AppData\Roaming\Microsoft\Installer\{338CE2A1-7BD6-AC18-0069-4A90F7C3D836}\ARPPRODUCTICON.exe
[2014.04.14 07:44:25 | 000,010,134 | R--- | M] () -- C:\Users\Petr\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2013.10.24 20:24:08 | 032,794,024 | ---- | M] (AVG) -- C:\Users\Petr\AppData\Roaming\OpenCandy\B0E0CF4F5C994B79A847E2175CD59C08\avg_tuht_stf_cs_2014_206_CZ.exe
[2013.05.16 15:25:04 | 001,062,472 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe
[2013.05.16 15:26:24 | 002,589,256 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\Seznam.cz\sznsetup.exe
[2013.04.16 13:52:34 | 000,055,808 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\ffkill.exe
[2012.07.10 13:36:16 | 000,427,064 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\pomocnikListicky.exe
[2013.04.12 10:13:24 | 000,457,208 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
[2013.11.12 10:44:54 | 000,316,440 | ---- | M] (SplitmediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\encprobe.exe
[2013.03.18 15:57:47 | 000,148,992 | ---- | M] (SplitmediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\VHMultiWriterExt.exe
[2013.11.12 10:44:36 | 000,317,464 | ---- | M] (SplitmediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\VHMultiWriterExt2.exe
[2013.11.12 10:44:40 | 001,795,096 | ---- | M] (SplitMediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\VHScrCapDlg32.exe
[2013.11.12 10:44:37 | 000,032,280 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XDS.exe
[2013.11.12 10:40:55 | 002,600,264 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplit.Core.exe
[2013.11.12 10:44:45 | 000,114,712 | ---- | M] (SplitmediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplitBroadcasterSrc.exe
[2013.11.12 10:44:49 | 000,064,536 | ---- | M] (SplitmediaLabs Limited) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplitCleanUp.exe
[2013.11.12 10:40:55 | 000,036,680 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplitRegSrc.exe
[2013.11.12 10:44:47 | 000,039,448 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplitRegSrc40.exe
[2013.11.12 10:44:50 | 000,026,136 | ---- | M] () -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplitUtils.exe
[2013.11.12 10:44:52 | 000,172,568 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\XSplit_Plugin_Installer.exe
[2013.11.12 10:44:43 | 000,328,216 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\xsplit_updater.exe
[2013.11.12 10:44:42 | 000,043,544 | ---- | M] (SplitMediaLabs) -- C:\Users\Petr\AppData\Roaming\SplitMediaLabs\XSplit\install\A86BEF5\x64\XGS64.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2015.05.15 15:13:50 | 000,000,045 | ---- | M] () -- C:\Windows\system32\initdebug.nfo

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Steam" = "C:\Program Files (x86)\Steam\steam.exe" -silent -- [2015.05.15 03:57:58 | 002,888,384 | ---- | M] (Valve Corporation)
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2015.04.17 14:49:32 | 031,282,304 | R--- | M] (Skype Technologies S.A.)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2015.05.17 12:52:49 | 000,000,512 | ---- | M] () MD5=F03AD7B260C309F1979748F55F38303D -- C:\PhysicalMBR.bin
[1 C:\*.tmp files -> C:\*.tmp -> ]

< >

< *crack* /s >
[2011.02.15 17:29:38 | 000,083,645 | ---- | M] () -- \Program Files (x86)\Mount&Blade With Fire and Sword\Sounds\Fire_Small_Crackle_Slick_op.ogg
[2014.12.13 23:22:11 | 000,000,159 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday\materials\decals\decal_bigcrack.vmt
[2014.12.13 23:21:05 | 000,699,256 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday\materials\decals\decal_bigcrack.vtf
[2014.12.13 23:21:21 | 000,000,134 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday\materials\overlays\tile_crack_stain001a.vmt
[2014.12.13 23:21:22 | 000,699,256 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday\materials\overlays\tile_crack_stain001a.vtf
[2014.10.26 14:24:14 | 000,003,132 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota_ugc\content\dota_addons\holdout_example\particles\creature_splitter\earthspirit_stone_cracks.vpcf
[2014.10.26 14:31:25 | 000,012,176 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota_ugc\game\dota_addons\holdout_example\particles\creature_splitter\earthspirit_stone_cracks.vpcf_c
[2013.12.02 23:53:24 | 000,000,100 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked.vmt
[2013.12.02 23:53:24 | 000,174,968 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\addons\CSS Content Addon (Dec2013)\materials\concrete\prodwllecracked.vtf
[2015.05.10 17:02:38 | 001,099,940 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\BG\Extension_01\Original\EX01_BlackCrack_OBJ.gpk
[2015.05.10 17:06:29 | 001,755,067 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\ArcDeva_CrackDevice.gpk
[2015.05.10 17:34:21 | 000,020,724 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\ArcDeva_CrackDevice_ANI.gpk
[2015.05.10 17:28:56 | 008,695,706 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\BlackCrack_BigStone.gpk
[2015.05.10 17:34:21 | 006,332,931 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\BlackCrack_BigStone_ANI.gpk
[2015.05.10 17:17:45 | 003,335,217 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\BlackCrack_NPC_OBJ.gpk
[2015.05.10 17:18:22 | 000,036,564 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\BlackCrack_NPC_OBJ_ANI.gpk
[2015.05.10 16:50:27 | 000,685,163 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\S1Game\CookedPC\Art_Data\Packages\CH\NPC\NPC_Objects\Black_Crack_Wall.gpk
[2015.03.30 16:44:45 | 001,159,409 | R--- | M] () -- \Program Files\Adobe\Adobe After Effects CC\Support Files\Presets\Image - Special Effects\Cracked Tiles.ffx
[2013.04.22 21:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler1.dll
[2013.04.22 21:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler2.dll
[2013.04.22 21:21:22 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\en_US\VSTPlugins\DeCrackler6.dll
[2013.12.15 21:41:36 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\pt_BR\VSTPlugins\DeCrackler1.dll
[2013.12.15 21:41:36 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\pt_BR\VSTPlugins\DeCrackler2.dll
[2013.12.15 21:41:36 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\pt_BR\VSTPlugins\DeCrackler6.dll
[2013.12.15 21:41:38 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\ru_RU\VSTPlugins\DeCrackler1.dll
[2013.12.15 21:41:38 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\ru_RU\VSTPlugins\DeCrackler2.dll
[2013.12.15 21:41:38 | 000,816,640 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\Plug-ins\ru_RU\VSTPlugins\DeCrackler6.dll
[2007.02.07 01:00:00 | 000,174,904 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\cub_runway_cracked_dirt.dds
[2007.02.07 01:00:00 | 000,349,680 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\ger_cobble_crack.dds
[2007.02.07 01:00:00 | 000,349,680 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\ger_cobble_crack2.dds
[2007.02.07 01:00:00 | 000,349,680 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\ger_cobble_crack3.dds
[2007.02.07 01:00:00 | 000,349,680 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\pat_street_cracks.dds
[2007.02.07 01:00:00 | 000,349,680 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\area_specific\_textures\pat_street_cracks_b.dds
[2007.02.07 01:00:00 | 000,002,896 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\art\library\cut_scenes\manowar\textures\05_crack.dds
[2007.02.07 01:00:00 | 000,002,896 | ---- | M] () -- \Program Files\Freedom Force vs the 3rd Reich\Data\cut_scenes\manowar\textures\05_crack.dds
[2008.03.03 00:00:00 | 000,036,726 | ---- | M] () -- \Program Files\Sun Age\SFX\panels\transmission_crackle.ogg
[2009.01.19 15:27:44 | 000,083,645 | ---- | M] () -- \Users\Petr\Desktop\Můj Nightcore\Hry\Mount&Blade Warband\Sounds\Fire_Small_Crackle_Slick_op.ogg
[2015.05.17 13:43:14 | 000,001,139 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\ESET NOD32 ANTIVIRUS 7 CRACK (32 64 BIT) THADOGG – zástupce.lnk
[2015.03.30 18:41:14 | 002,437,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_01.wav
[2015.03.30 18:24:05 | 003,247,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_02.wav
[2015.03.30 18:27:42 | 003,247,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_03.wav
[2015.03.30 18:23:05 | 003,247,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_04.wav
[2015.03.30 18:41:14 | 002,437,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_05.wav
[2015.03.30 18:27:05 | 001,627,218 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_06.wav
[2015.03.30 18:42:01 | 001,281,054 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_07.wav
[2015.03.30 18:03:30 | 001,638,042 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\ORGANIC\Disintegration\Disintegration_Crackle_08.wav
[2015.03.30 18:31:45 | 006,363,338 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\VideoCopilot - MotionPulse BlackBox & Shockwave\MotionPulse_BlackBox_24-Bit_Wav\VELOCITY\Atmospheric\Atmospheric_Night_Crackle_01.wav

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2011.10.13 05:24:20 | 000,110,592 | ---- | M] () -- \AeriaGames\Downloader\Uploader.dat
[2011.10.13 05:24:20 | 000,110,592 | ---- | M] () -- \AeriaGames\Wolfteam\Uploader.dat
[2014.07.11 15:48:45 | 000,303,440 | ---- | M] () -- \AeriaGames\Wolfteam\avital\childprocfuncloader.xoe
[2014.07.11 15:48:45 | 000,310,608 | ---- | M] () -- \AeriaGames\Wolfteam\avital\parentprocfuncloader.xoe
[2011.11.14 18:51:36 | 000,110,592 | ---- | M] () -- \Game\SoftnyxGame\WolfTeamIS\uploader.dat
[2013.01.08 16:06:30 | 000,274,984 | ---- | M] () -- \Game\SoftnyxGame\WolfTeamIS\avital\childprocfuncloader.xoe
[2013.01.08 16:06:30 | 000,289,832 | ---- | M] () -- \Game\SoftnyxGame\WolfTeamIS\avital\parentprocfuncloader.xoe
[2011.12.12 17:17:34 | 000,022,616 | ---- | M] () -- \Game\SoftnyxGame\WolfTeamIS\Img\Downloader.bmp
[2015.04.02 11:20:32 | 000,196,104 | ---- | M] () -- \Program Files (x86)\Arc\HttpDownloader.dll
[2013.09.13 19:51:30 | 000,008,827 | ---- | M] () -- \Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit.resources\inspector\HeapSnapshotLoader.js
[2009.05.23 02:38:52 | 000,061,952 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.dll
[2009.05.22 21:27:34 | 000,004,608 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.tlb
[2014.09.03 01:27:24 | 000,268,432 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2014.09.03 01:27:24 | 000,019,096 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2015.03.26 08:42:28 | 000,597,464 | ---- | M] () -- \Program Files (x86)\Comodo\Chromodo\extensions\media_downloader.crx
[2013.02.01 01:16:50 | 000,065,344 | R--- | M] () -- \Program Files (x86)\Hi-Rez Studios\HiRezGames\smite\Binaries\Win32\PhysXLoader.dll
[2014.06.02 14:10:06 | 000,176,200 | ---- | M] () -- \Program Files (x86)\Cheat Engine 6.4\Kernelmoduleunloader.exe
[2014.06.26 13:50:38 | 000,000,132 | ---- | M] () -- \Program Files (x86)\Cheat Engine 6.4\Kernelmoduleunloader.exe.sig
[2010.08.27 19:43:08 | 000,071,008 | ---- | M] () -- \Program Files (x86)\Mafia II\pc\PhysXLoader.dll
[2013.12.20 02:37:56 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.12.20 02:37:56 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013.12.20 02:37:44 | 000,073,536 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.12.20 02:37:44 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2015.05.11 10:48:02 | 000,473,188 | ---- | M] () -- \Program Files (x86)\RaidCall\flash\XOverlayMainLoader.swf
[2014.12.10 03:28:04 | 000,001,701 | ---- | M] () -- \Program Files (x86)\Steam\friends\broadcastuploaderrornotification.res
[2014.11.11 20:48:42 | 000,007,825 | ---- | M] () -- \Program Files (x86)\Steam\remoteui\static\libs\images\ajax-loader.gif
[2014.10.26 14:23:53 | 000,007,680 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota_ugc\game\bin\win32\pythoncomloader27.dll
[2014.10.26 14:23:43 | 000,008,192 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota_ugc\game\bin\win64\pythoncomloader27.dll
[2013.12.03 19:40:57 | 000,001,985 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\garrysmod\materials\spawnicons\models\pyro_overloader\overloader.png
[2015.03.11 12:53:35 | 000,185,184 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GunZ 2 The Second Duel\APEX_LoaderSHIPPING_x86.dll
[2015.03.11 12:57:16 | 000,064,352 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GunZ 2 The Second Duel\PhysXLoader.dll
[2013.06.23 21:49:46 | 000,134,144 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Skyrim\skse_loader.exe
[2013.06.23 21:49:44 | 000,116,224 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Skyrim\skse_steam_loader.dll
[2015.05.10 17:24:14 | 000,752,440 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\downloader.dll
[2015.05.10 16:39:48 | 000,068,688 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\TERA\Client\Binaries\PhysXLoader.dll
[2013.09.09 15:18:26 | 000,070,944 | ---- | M] () -- \Program Files (x86)\Swordsman_en\bin\physxloader.dll
[2014.11.12 13:48:16 | 000,066,912 | ---- | M] () -- \Program Files (x86)\Swordsman_en\physx\v2.8.4\physxloader64.dll
[2003.09.26 09:15:26 | 000,169,384 | ---- | M] () -- \Program Files (x86)\Valve\cstrike\models\qloader.mdl
[2014.11.16 00:19:56 | 000,690,467 | ---- | M] () -- \Program Files (x86)\Valve\cstrike\sound\vgaming_jb\trance\freeloader.mp3
[2003.09.26 15:19:52 | 000,352,548 | ---- | M] () -- \Program Files (x86)\Valve\valve\models\loader.mdl
[2003.09.26 15:24:16 | 000,012,764 | ---- | M] () -- \Program Files (x86)\Valve\valve\sound\ambience\loader_hydra1.wav
[2003.09.26 15:24:16 | 000,012,164 | ---- | M] () -- \Program Files (x86)\Valve\valve\sound\ambience\loader_step1.wav
[2013.10.25 01:00:22 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CC\Support Files\MXF_SDK_MetaMetadata_BinaryLoader_4.4.24.dll
[2013.10.25 01:00:22 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CC\Support Files\MXF_SDK_MetaMetadata_XSDLoader2_4.4.24.dll
[2013.10.25 01:00:22 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CC\Support Files\MXF_SDK_MetaMetadata_XSDLoader_4.4.24.dll
[2013.04.17 22:20:32 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_BinaryLoader_4.4.13.dll
[2013.04.17 22:20:32 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_XSDLoader2_4.4.13.dll
[2013.04.17 22:20:32 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CC\MXF_SDK_MetaMetadata_XSDLoader_4.4.13.dll
[2013.12.15 21:42:36 | 000,099,328 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_BinaryLoader_4.4.25.dll
[2013.12.15 21:42:36 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_XSDLoader2_4.4.25.dll
[2013.12.15 21:42:36 | 000,148,480 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\MXF_SDK_MetaMetadata_XSDLoader_4.4.25.dll
[2015.05.12 16:06:53 | 000,072,440 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
[2015.05.12 16:06:53 | 000,085,336 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader64.exe
[2015.05.12 16:06:39 | 000,105,464 | ---- | M] () -- \Program Files\AVAST Software\Avast\ng\aswSfLoader.exe
[2013.03.29 23:28:18 | 000,099,328 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_BinaryLoader_4.4.13.dll
[2013.03.29 23:28:18 | 000,196,608 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_XSDLoader2_4.4.13.dll
[2013.03.29 23:28:18 | 000,148,480 | ---- | M] () -- \Program Files\Common Files\Adobe\dynamiclinkmediaserver\7.0\MXF_SDK_MetaMetadata_XSDLoader_4.4.13.dll
[2014.09.03 01:27:24 | 000,364,176 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2014.09.03 01:27:24 | 000,019,096 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2013.08.22 19:01:26 | 000,061,528 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2011.10.15 13:18:08 | 000,002,941 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2011.10.15 13:18:08 | 000,000,411 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2011.10.15 13:18:10 | 001,138,236 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\modules\org-openide-loaders.jar
[2011.10.15 13:18:08 | 000,007,002 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2011.10.15 13:18:08 | 000,006,658 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2011.10.15 13:18:10 | 000,000,456 | ---- | M] () -- \Pylo\MCreator\jdk\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2014.09.20 20:37:07 | 000,000,404 | ---- | M] () -- \Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.144\deploy\assets\storeImages\layout\small_loader.gif
[2014.08.05 01:51:22 | 000,018,719 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\2.2.0.18_0\js\configLoader.js
[2014.01.24 01:36:30 | 000,002,597 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\2.2.0.18_0\js\scriptLoader.js
[2015.03.10 20:26:44 | 000,003,208 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.12_0\skin\ajax-loader.gif
[2014.08.13 13:14:30 | 000,009,418 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.33_0\img\gifloader.gif
[2015.02.25 15:30:10 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\093AJZT0\AdLoader[1].htm
[2015.01.17 20:31:34 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\093AJZT0\queryLoader[1].css
[2014.11.26 18:45:50 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\093AJZT0\queryLoader[1].js
[2014.04.08 20:46:39 | 000,112,122 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0XL6URKB\AdLoader-7b473315d0084c71df83cdee72aab144.min[1].js
[2014.04.08 20:46:39 | 000,001,870 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0XL6URKB\AdLoader[1].htm
[2014.05.29 07:02:49 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0XL6URKB\AdLoader[2].htm
[2014.04.08 22:06:38 | 000,000,374 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0XL6URKB\queryLoader[1].css
[2015.02.12 17:33:57 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0XL6URKB\queryLoader[2].css
[2013.10.13 15:44:31 | 000,000,723 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3CYH2QSI\downloaderror[1].js
[2014.01.30 14:30:26 | 000,111,438 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\AdLoader-8123c724cc0668230ba8270eea997632.min[1].js
[2014.01.30 14:30:26 | 000,001,537 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\AdLoader[1].htm
[2014.12.10 21:48:33 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\AdLoader[2].htm
[2014.11.05 16:53:40 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\queryLoader[1].css
[2014.04.09 07:22:27 | 000,005,708 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\queryLoader[1].js
[2015.04.14 20:46:31 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO5JO3FU\queryLoader[2].css
[2014.12.10 20:17:10 | 000,019,121 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\AdLoader-288a31a04e1398b1a794975bf93ce9a4.min[1].js
[2014.09.09 07:48:14 | 000,018,715 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\AdLoader-a5fa12058ddb9a8919d6906ba95d7c57.min[1].js
[2014.09.30 21:59:51 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\AdLoader[1].htm
[2014.10.28 19:07:18 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\AdLoader[2].htm
[2015.04.08 19:23:41 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\AdLoader[3].htm
[2014.10.03 15:05:01 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[1].css
[2014.09.04 20:12:52 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[1].js
[2014.10.14 19:56:21 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[2].js
[2015.01.04 04:15:03 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[3].js
[2015.01.17 20:31:35 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[4].js
[2015.02.05 18:37:10 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KULITNTQ\queryLoader[6].js
[2013.10.13 15:44:31 | 000,001,174 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KWKUASJZ\downloader[1].js
[2014.09.09 07:48:13 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LV22DN8M\AdLoader[1].htm
[2015.05.10 00:19:41 | 000,003,687 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LV22DN8M\preloaderMusic[1].js
[2015.04.01 20:33:24 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LV22DN8M\queryLoader[1].css
[2014.08.06 18:40:59 | 000,018,544 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\AdLoader-0ee9685baf8ff395a7119d551063e2d4.min[1].js
[2014.05.29 15:35:11 | 000,017,912 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\AdLoader-3b8e790904fffcf74f96367cd382e261.min[2].js
[2014.05.28 22:23:28 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\AdLoader[1].htm
[2014.05.08 09:59:00 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\queryLoader[1].css
[2014.05.08 09:59:04 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\queryLoader[1].js
[2014.05.22 16:20:09 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\queryLoader[2].css
[2014.05.22 16:20:13 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\queryLoader[2].js
[2014.11.20 19:22:59 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1DHH3G9\queryLoader[3].css
[2014.06.03 19:37:59 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\AdLoader[1].htm
[2014.07.02 09:58:06 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\AdLoader[2].htm
[2015.05.13 17:23:44 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\AdLoader[3].htm
[2015.05.15 17:21:48 | 000,011,267 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\loader.min[1].js
[2014.06.05 21:12:12 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\queryLoader[1].css
[2014.06.05 21:12:16 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\queryLoader[1].js
[2015.02.05 18:37:09 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\queryLoader[2].css
[2015.01.13 20:38:22 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\AdLoader[1].htm
[2015.05.15 17:22:22 | 000,011,358 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\loader[1].js
[2014.09.04 20:12:48 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[1].css
[2014.10.14 19:56:21 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[2].css
[2014.10.03 15:05:01 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[2].js
[2015.01.04 04:15:03 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[3].css
[2014.11.05 16:53:40 | 000,005,505 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[3].js
[2015.05.06 16:36:03 | 000,000,353 | ---- | M] () -- \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\queryLoader[5].css
[2015.03.12 12:47:42 | 000,072,638 | ---- | M] () -- \Users\Petr\AppData\Local\Skype\Apps\login\images\loader.gif
[2015.03.12 12:47:42 | 000,003,032 | ---- | M] () -- \Users\Petr\AppData\Local\Skype\Apps\login\images\loader.png
[2015.03.12 12:47:42 | 000,006,012 | ---- | M] () -- \Users\Petr\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif
[2015.03.12 12:47:42 | 000,021,956 | ---- | M] () -- \Users\Petr\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif
[2015.03.12 12:47:42 | 000,009,772 | ---- | M] () -- \Users\Petr\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.02 04:03:03 | 000,111,756 | ---- | M] () -- \Users\Petr\AppData\Local\Temp\avnwldrtemp\networkloader.log
[2014.04.24 07:08:51 | 000,002,884 | ---- | M] () -- \Users\Petr\AppData\Local\Temp\mcmodinst38731291783134601751398316129368\com\sijobe\spc\core\SPCLoader.class
[2014.04.24 07:08:51 | 000,006,514 | ---- | M] () -- \Users\Petr\AppData\Local\Temp\mcmodinst38731291783134601751398316129368\com\sijobe\spc\util\DynamicClassLoader.class
[2014.04.24 07:08:53 | 000,002,884 | ---- | M] () -- \Users\Petr\AppData\Local\Temp\mcmodinst66391423660470211891398316133068\com\sijobe\spc\core\SPCLoader.class
[2014.04.24 07:08:53 | 000,006,514 | ---- | M] () -- \Users\Petr\AppData\Local\Temp\mcmodinst66391423660470211891398316133068\com\sijobe\spc\util\DynamicClassLoader.class
[2015.04.18 01:19:28 | 000,283,871 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log
[2014.04.23 17:54:30 | 000,047,507 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log.1
[2014.04.23 17:54:14 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log.1.lck
[2015.01.21 19:26:39 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-0.log.lck
[2015.03.15 14:53:31 | 000,299,453 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-1.log
[2015.01.21 19:33:26 | 000,276,459 | ---- | M] () -- \Users\Petr\AppData\Roaming\.minecraft\ForgeModLoader-client-2.log
[2014.01.30 21:45:23 | 000,647,255 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-0.log
[2014.01.24 20:27:10 | 000,636,059 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-0.log.1
[2014.01.24 20:23:54 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-0.log.1.lck
[2014.01.30 21:35:50 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-0.log.lck
[2014.01.30 21:35:46 | 000,684,370 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-1.log
[2014.01.27 21:05:09 | 000,639,393 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\hexxit\ForgeModLoader-client-2.log
[2015.03.02 21:53:32 | 000,046,132 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\official-crafting-dead-mod\ForgeModLoader-client-0.log
[2015.03.02 21:52:50 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\official-crafting-dead-mod\ForgeModLoader-client-0.log.lck
[2014.12.24 23:56:22 | 000,053,952 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\official-crafting-dead-mod\ForgeModLoader-client-1.log
[2014.12.24 22:34:36 | 000,065,811 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\official-crafting-dead-mod\ForgeModLoader-client-2.log
[2015.01.08 18:05:24 | 000,063,356 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\tekkit\ForgeModLoader-0.log
[2015.01.08 18:03:28 | 000,001,980 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\tekkit\mods\ComputerCraft\org\luaj\vm2\luajc\JavaLoader.class
[2014.01.27 18:53:30 | 000,370,603 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\voltz\ForgeModLoader-client-0.log
[2014.01.27 18:25:35 | 000,000,000 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\voltz\ForgeModLoader-client-0.log.lck
[2014.01.27 18:25:21 | 000,415,820 | ---- | M] () -- \Users\Petr\AppData\Roaming\.technic\modpacks\voltz\ForgeModLoader-client-1.log
[2015.04.11 11:47:28 | 000,472,672 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\wolfteam_us_downloader.exe
[2015.05.17 13:44:21 | 000,000,993 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\wolfteam_us_downloader.exe – zástupce (2).lnk
[2015.05.17 13:43:13 | 000,000,993 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\wolfteam_us_downloader.exe – zástupce.lnk
[2015.04.13 10:31:35 | 000,000,656 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\Log\HttpDownloader.log
[2014.01.06 19:20:16 | 000,847,432 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\NyxLauncherIS\Full_Downloader.exe
[2011.12.06 19:39:36 | 000,022,616 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\NyxLauncherIS\Img\Downloader.bmp
[2014.08.31 17:31:39 | 000,169,384 | ---- | M] () -- \Users\Petr\GSplay\csko\cstrike\models\qloader.mdl
[2014.08.31 17:34:17 | 000,352,548 | ---- | M] () -- \Users\Petr\GSplay\csko\valve\models\loader.mdl
[2014.08.31 17:33:50 | 000,012,764 | ---- | M] () -- \Users\Petr\GSplay\csko\valve\sound\ambience\loader_hydra1.wav
[2014.08.31 17:33:49 | 000,012,164 | ---- | M] () -- \Users\Petr\GSplay\csko\valve\sound\ambience\loader_step1.wav
[2014.08.26 01:07:40 | 000,160,768 | ---- | M] () -- \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\APEX_Loader_x64.dll
[2014.08.26 00:58:09 | 000,142,848 | ---- | M] () -- \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\APEX_Loader_x86.dll
[2013.06.07 22:01:47 | 000,319,488 | ---- | M] () -- \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\wws_crashreport_uploader.exe
[2013.02.02 00:04:54 | 000,300,392 | ---- | M] () -- \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\LaunchPad.libs\wws_crashreport_uploader.exe
[2015.01.08 22:22:58 | 000,064,352 | ---- | M] () -- \Users\Public\Trazzy Entertainment\Wind of Luck Arena\Game\PhysXLoader.dll
[2013.03.09 08:52:18 | 000,019,080 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8
[2010.03.24 20:35:48 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2013.03.09 08:17:04 | 000,019,080 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8
[2010.03.24 20:12:34 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2013.03.09 08:52:18 | 000,364,168 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8
[2010.03.24 20:35:48 | 000,370,512 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2013.03.09 08:17:04 | 000,268,440 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8
[2010.03.24 20:12:34 | 000,249,680 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25

[2009.07.14 14:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2015.04.27 22:30:14 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_da-dk_2f07472b2328d2ee.manifest
[2015.04.27 22:35:42 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_de-de_2c32dc6724ff2788.manifest
[2015.04.27 22:31:31 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_el-gr_d4c909fa14149016.manifest
[2015.04.27 21:23:13 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_en-us_d523b26013dd334d.manifest
[2015.04.27 22:33:11 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_es-es_d4ef0f44140424f2.manifest
[2015.04.27 22:30:39 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_fi-fi_740a13f1091e171c.manifest
[2015.04.27 22:35:50 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_fr-fr_77a6854306d63b54.manifest
[2015.04.27 22:33:17 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_hu-hu_bf17058aeb360a70.manifest
[2015.04.27 22:33:12 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_it-it_61ce7b89de0820d2.manifest
[2015.04.27 22:39:09 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ja-jp_03f3fa96d12332ad.manifest
[2015.04.27 22:37:42 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ko-kr_a75dd74bc393f9c3.manifest
[2015.04.27 22:28:34 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_nb-no_8ff058809bb9257f.manifest
[2015.04.27 22:34:16 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_nl-nl_8e2fa3be9ce52f54.manifest
[2015.04.27 22:33:02 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pl-pl_d46bfe4082079d08.manifest
[2015.04.27 22:33:22 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pt-br_d6bfe8e4809130ec.manifest
[2015.04.27 22:32:12 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pt-pt_d7a1b8508000a0c8.manifest
[2015.04.27 22:32:46 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ru-ru_1e44ca1464e22ef4.manifest
[2015.04.27 22:31:57 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_sv-se_ba3fb4895c0b394f.manifest
[2015.04.27 22:33:31 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_tr-tr_634cfed04ac73b40.manifest
[2015.04.27 22:39:03 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-cn_34aa1ccdfaff0d5f.manifest
[2015.04.27 22:33:20 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-hk_3355155bfbda7fef.manifest
[2015.04.27 22:38:06 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-tw_38a65a23f86fe9cf.manifest
[2015.04.27 22:32:42 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_9fc03df067ff8c4b.manifest
[2015.04.27 22:30:13 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_da-dk_3cfa1e175e45884a.manifest
[2015.04.27 22:35:17 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_de-de_3a25b353601bdce4.manifest
[2015.04.27 22:31:29 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_el-gr_e2bbe0e64f314572.manifest
[2015.04.27 21:23:03 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_en-us_e316894c4ef9e8a9.manifest
[2015.04.27 22:32:01 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_es-es_e2e1e6304f20da4e.manifest
[2015.04.27 22:30:34 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_fi-fi_81fceadd443acc78.manifest
[2015.04.27 22:35:27 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_fr-fr_85995c2f41f2f0b0.manifest
[2015.04.27 22:32:18 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_hu-hu_cd09dc772652bfcc.manifest
[2015.04.27 22:32:06 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_it-it_6fc152761924d62e.manifest
[2015.04.27 22:38:45 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ja-jp_11e6d1830c3fe809.manifest
[2015.04.27 22:37:26 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ko-kr_b550ae37feb0af1f.manifest
[2015.04.27 22:28:32 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_nb-no_9de32f6cd6d5dadb.manifest
[2015.04.27 22:33:38 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_nl-nl_9c227aaad801e4b0.manifest
[2015.04.27 22:31:57 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pl-pl_e25ed52cbd245264.manifest
[2015.04.27 22:32:24 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pt-br_e4b2bfd0bbade648.manifest
[2015.04.27 22:30:56 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_pt-pt_e5948f3cbb1d5624.manifest
[2015.04.27 22:31:34 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_ru-ru_2c37a1009ffee450.manifest
[2015.04.27 22:30:47 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_sv-se_c8328b759727eeab.manifest
[2015.04.27 22:32:41 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_tr-tr_713fd5bc85e3f09c.manifest
[2015.04.27 22:38:42 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-cn_429cf3ba361bc2bb.manifest
[2015.04.27 22:33:19 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-hk_4147ec4836f7354b.manifest
[2015.04.27 22:37:50 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_zh-tw_46993110338c9f2b.manifest
[2015.04.27 21:41:03 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution\Download\4cd9ee4dd600ff2423b7df10c650461c\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_9e79873c9a709a4e.manifest
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.04.15 15:54:01 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 13:03:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_69637bfcab8b6996\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.04.15 15:54:01 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.03.11 15:00:59 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013.manifest
[2015.03.11 15:00:59 | 000,033,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013_winload.efi.mui_35ee487d
[2015.03.11 15:00:59 | 000,034,752 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013_winload.exe.mui_3bc5b827
[2015.03.11 15:00:59 | 000,029,624 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013_winresume.efi.mui_f412814e
[2015.03.11 15:00:59 | 000,030,136 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013_winresume.exe.mui_ff8b5358
[2015.03.11 15:01:04 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646.manifest
[2015.03.11 15:01:04 | 000,693,176 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646_winload.efi_75834aa0
[2015.03.11 15:01:04 | 000,619,056 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646_winload.exe_75835076
[2015.03.11 15:01:05 | 000,616,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646_winresume.efi_85cd069f
[2015.03.11 15:01:05 | 000,532,176 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2015.05.14 01:17:29 | 000,000,616 | ---- | M] () -- \Windows\winsxs\FileMaps\programdata_microsoft_diagnosis_asimovuploader_0413bca0c3dfdda4.cdf-ms
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2014.07.08 23:51:46 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18526_cs-cz_915f8df913af6c96.manifest
[2015.02.03 06:49:45 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013.manifest
[2014.07.08 23:52:03 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22736_cs-cz_91de5cbe2cd52578.manifest
[2014.12.13 03:57:48 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22908_cs-cz_9200d0e22cbafea1.manifest
[2015.01.13 00:17:25 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_91e42f042cd18522.manifest
[2015.01.16 08:36:46 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_91e62f982ccfb7d0.manifest
[2015.01.27 07:32:05 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_91d08fc02cdfefb2.manifest
[2015.02.03 07:30:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_91d591322cdb6e65.manifest
[2015.03.17 08:28:02 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_91faa7482cc099d9.manifest
[2015.04.27 22:33:31 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_91cd67042ce2d6ef.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2014.08.19 05:35:45 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18574_none_b90bc95183772bd0.manifest
[2015.02.03 05:51:30 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2014.08.19 05:26:49 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22780_none_b98696ee9ca07f56.manifest
[2014.12.12 08:29:00 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22908_none_b9e51c6a9c5864d4.manifest
[2015.01.12 05:50:53 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55.manifest
[2015.01.16 08:37:02 | 000,005,511 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03.manifest
[2015.01.27 06:22:06 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22943_none_b9b4db489c7d55e5.manifest
[2015.02.03 06:17:47 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498.manifest
[2015.03.17 07:34:28 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c.manifest
[2015.04.27 21:40:54 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_b9b1b28c9c803d22.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.04.15 15:54:01 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.04.15 15:54:01 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.13 07:23:08 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >
[2014.04.26 12:11:54 | 000,001,852 | ---- | M] () -- \Pylo\MCreator\si\pylo\mcreator\FloatNode.class
[2014.04.26 12:11:54 | 000,001,846 | ---- | M] () -- \Pylo\MCreator\si\pylo\mcreator\IntNode.class
[2014.04.26 12:11:54 | 000,002,171 | ---- | M] () -- \Pylo\MCreator\si\pylo\mcreator\ListNode.class
[2014.04.26 12:11:54 | 000,001,852 | ---- | M] () -- \Pylo\MCreator\si\pylo\mcreator\ShortNode.class

< *AutoKMS* /s >
[2013.10.02 04:53:18 | 000,000,184 | ---- | M] () -- \Windows\AutoKMS.ini
[2013.10.02 06:34:25 | 000,000,983 | ---- | M] () -- \Windows\AutoKMS.log
[2015.05.17 11:36:38 | 000,000,198 | ---- | M] () -- \Windows\Tasks\AutoKMS.job
[2015.05.11 06:57:34 | 000,000,202 | ---- | M] () -- \Windows\Tasks\AutoKMSDaily.job

< *activator* /s >
[2013.03.16 12:26:48 | 000,000,350 | ---- | M] () -- \Pylo\MCreator\res\block\activator_rail.png

< *serial* /s >
[2013.02.13 15:09:51 | 000,020,800 | R--- | M] () -- \Program Files (x86)\Hi-Rez Studios\HiRezGames\smite\Binaries\Autoreporter.XmlSerializers.dll
[2008.09.17 16:33:08 | 000,000,592 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\VBSnippets\1033\Connectivity\EnumerateSerialPorts.snippet
[2008.09.17 16:33:08 | 000,001,178 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\VBSnippets\1033\Connectivity\ReadDatafromaSerialPort.snippet
[2008.09.17 16:33:08 | 000,001,492 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\VBSnippets\1033\Connectivity\UseaSerialPorttoDialaPhoneNumber.snippet
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2013.12.03 15:15:44 | 000,712,704 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\GarrysMod\bin\dmserializers.dll
[2014.12.28 17:48:13 | 000,712,704 | ---- | M] () -- \Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\bin\dmserializers.dll
[2013.10.25 03:28:54 | 000,814,504 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CC\Support Files\boost_serialization.dll
[2013.12.16 04:11:40 | 000,814,496 | ---- | M] () -- \Program Files\Adobe\Adobe Premiere Pro CC\boost_serialization.dll
[2014.07.11 00:24:01 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2011.10.15 13:18:00 | 000,033,536 | ---- | M] () -- \Pylo\MCreator\jdk\bin\serialver.exe
[2015.03.14 11:19:19 | 000,003,072 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage
[2015.03.14 11:19:19 | 000,003,608 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage-journal
[2015.01.28 15:51:24 | 001,267,712 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\http_www.sledujuserialy.cz_0.localstorage
[2015.01.28 15:51:24 | 000,016,384 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\http_www.sledujuserialy.cz_0.localstorage-journal
[2015.03.14 11:19:19 | 000,003,072 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\Local Storage\http_www.serialzone.cz_0.localstorage
[2015.03.14 11:19:19 | 000,003,608 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\Local Storage\http_www.serialzone.cz_0.localstorage-journal
[2015.01.28 15:51:24 | 001,267,712 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\Local Storage\http_www.sledujuserialy.cz_0.localstorage
[2015.01.28 15:51:24 | 000,016,384 | ---- | M] () -- \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Local Storage\Local Storage\http_www.sledujuserialy.cz_0.localstorage-journal
[2015.03.14 11:19:19 | 000,003,072 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage
[2015.03.14 11:19:19 | 000,003,608 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.serialzone.cz_0.localstorage-journal
[2015.01.28 15:51:24 | 001,267,712 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sledujuserialy.cz_0.localstorage
[2015.01.28 15:51:24 | 000,016,384 | ---- | M] () -- \Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sledujuserialy.cz_0.localstorage-journal
[2014.01.09 19:00:10 | 001,387,928 | ---- | M] () -- \Users\Petr\Desktop\Můj Nightcore\Hry\Space Engineers v01.014.010\Bin\Sandbox.CommonLib.XmlSerializers.dll
[2014.01.09 19:00:10 | 001,387,928 | ---- | M] () -- \Users\Petr\Desktop\Můj Nightcore\Hry\Space Engineers v01.014.010\Bin64\Sandbox.CommonLib.XmlSerializers.dll
[2013.12.27 19:29:27 | 000,712,704 | ---- | M] () -- \Users\Petr\Desktop\Nepoužitelné hovadiny\Gmod server\steamapps\common\GarrysModDS\bin\dmserializers.dll
[2015.01.08 22:25:05 | 000,056,864 | ---- | M] () -- \Users\Public\Trazzy Entertainment\Wind of Luck Arena\Game\Data\resources\interface\fonts\QuebecSerial-Regular.ttf
[2013.07.08 14:43:52 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.10.16 08:12:14 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\91eb4f41130c65ef17f0fee1d3ab48fb\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.10.16 09:07:29 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b1e0939384cc320d6ac7b8921ccc2877\System.Runtime.Serialization.ni.dll
[2014.10.16 08:14:19 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\2a07bf9a29a64827bf06e7853214fc0f\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.10.16 09:49:48 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\5015b90fbd31c9ba4fff989b2c79711b\System.Runtime.Serialization.ni.dll
[2015.01.22 18:43:20 | 000,306,176 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\a94049de665f1854ea5df1a857b2c68f\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2015.01.22 18:43:20 | 000,000,440 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\a94049de665f1854ea5df1a857b2c68f\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2015.01.22 18:44:39 | 002,855,424 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\187177229c00aec6dec613ea4b9ff209\System.Runtime.Serialization.ni.dll
[2015.01.22 18:44:39 | 000,000,996 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\187177229c00aec6dec613ea4b9ff209\System.Runtime.Serialization.ni.dll.aux
[2015.01.22 20:35:32 | 000,025,600 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\ad0261438ff8f46e093faa717226ebef\System.Xml.Serialization.ni.dll
[2015.01.22 20:35:32 | 000,000,284 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\ad0261438ff8f46e093faa717226ebef\System.Xml.Serialization.ni.dll.aux
[2015.01.24 01:52:02 | 000,366,080 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\769e80c5193dedd5ef90a962c002d15a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2015.01.24 01:52:02 | 000,000,440 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runt9064068c#\769e80c5193dedd5ef90a962c002d15a\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2015.01.24 15:55:57 | 003,597,312 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\cdca00d5c58d31de2503310a31ca096f\System.Runtime.Serialization.ni.dll
[2015.01.24 15:55:57 | 000,000,996 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\cdca00d5c58d31de2503310a31ca096f\System.Runtime.Serialization.ni.dll.aux
[2015.01.24 15:57:06 | 000,027,648 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\85b2d15d965e64489744325c53d91db0\System.Xml.Serialization.ni.dll
[2015.01.24 15:57:06 | 000,000,284 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.84e525b7#\85b2d15d965e64489744325c53d91db0\System.Xml.Serialization.ni.dll.aux
[2014.04.12 01:48:40 | 001,051,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\6414876250E69FF3395387C6C7F05BEB\4.5.51209\System.Runtime.Serialization.dll.amd64
[2014.04.12 01:48:40 | 001,051,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\6414876250E69FF3395387C6C7F05BEB\4.5.51209\System.Runtime.Serialization.dll.x86
[2014.04.12 01:48:40 | 001,051,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\6414876250E69FF3395387C6C7F05BEB\4.5.51209\System.Runtime.Serialization.dll_gac_x86
[2014.04.12 01:48:40 | 000,133,432 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2014.04.12 00:08:06 | 000,029,472 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2014.04.12 00:08:06 | 000,029,512 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2014.04.12 00:08:06 | 000,029,976 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2014.07.23 01:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.04.12 00:08:06 | 000,045,800 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2014.04.12 00:08:06 | 000,029,928 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2009.05.23 07:30:34 | 000,008,007 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.xml
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.07.11 00:24:11 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2014.07.23 01:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2014.04.12 01:48:40 | 000,133,432 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2014.04.12 00:08:06 | 000,029,472 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2014.04.12 00:08:06 | 000,029,512 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2014.04.12 00:08:06 | 000,029,976 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2014.04.12 00:08:06 | 000,045,800 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2014.04.12 00:08:06 | 000,029,928 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2014.06.24 01:43:09 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2014.07.11 00:24:02 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2014.07.23 01:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2014.04.12 01:48:40 | 000,133,432 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2014.04.12 00:08:06 | 000,029,472 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll
[2014.04.12 00:08:06 | 000,029,512 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2014.04.12 00:08:06 | 000,029,976 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2014.04.12 00:08:06 | 000,045,800 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2014.04.12 00:08:06 | 000,029,928 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2009.07.14 17:17:19 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1c215c9ac50719c5\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_1e468964c1feb99a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.22731_cs-cz_1ec35795db263fce\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2009.07.14 17:17:22 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009.07.14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_b96904386c2fe002\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_bb8e310269277fd7\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.22733_cs-cz_bc0cffc7824d38b9\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:25 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:09 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.18523_none_a9a7e561157d82e9\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:05 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.22733_none_92db3ec72f23fc97\System.Runtime.Serialization.Formatters.Soap.dll
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2009.06.10 22:30:46 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c\System.Runtime.Serialization.dll
[2012.10.06 12:53:01 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7\System.Runtime.Serialization.dll
[2010.11.05 03:52:16 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2014.03.09 23:48:51 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.18523_none_5919d8d674e2f3ff\System.Runtime.Serialization.dll
[2014.07.11 00:24:02 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.18532_none_591aefe874e1f3b5\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2014.03.17 16:38:51 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22733_none_424d323c8e896dad\System.Runtime.Serialization.dll
[2014.07.08 01:36:29 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22743_none_424e32868e888704\System.Runtime.Serialization.dll
[2009.06.10 22:30:43 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05\System.Runtime.Serialization.dll
[2012.10.06 12:53:00 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70\System.Runtime.Serialization.dll
[2010.11.05 03:52:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2014.03.09 23:48:50 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_93f0e5a0c8daee98\System.Runtime.Serialization.dll
[2014.07.11 00:24:01 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_93f1fcb2c8d9ee4e\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2014.03.17 16:38:51 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_7d243f06e2816846\System.Runtime.Serialization.dll
[2014.07.08 01:36:29 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_7d253f50e280819d\System.Runtime.Serialization.dll
[2013.10.13 23:27:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2013.10.13 23:27:45 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2009.07.14 17:17:49 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009.07.14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2009.07.14 17:17:47 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011.02.05 15:10:43 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16757_none_6dccf6b5c641c933.manifest
[2011.02.05 15:05:47 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.20897_none_6e2b53d0df7fd8c1.manifest
[2011.02.05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011.02.05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009.07.14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2009.07.14 04:26:23 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c.manifest
[2012.10.06 20:44:48 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df.manifest
[2012.10.06 21:00:33 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7.manifest
[2010.11.20 06:21:24 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012.10.05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2014.07.02 08:30:52 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.18523_none_5919d8d674e2f3ff.manifest
[2014.07.14 04:24:48 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.18532_none_591aefe874e1f3b5.manifest
[2012.10.05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2014.07.02 08:30:44 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22733_none_424d323c8e896dad.manifest
[2014.07.14 04:13:57 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22743_none_424e32868e888704.manifest
[2009.07.14 04:27:09 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05.manifest
[2012.10.06 20:46:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278.manifest
[2012.10.06 21:01:29 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70.manifest
[2010.11.20 06:22:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012.10.05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2014.07.02 08:31:00 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_93f0e5a0c8daee98.manifest
[2014.07.14 04:24:58 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_93f1fcb2c8d9ee4e.manifest
[2012.10.05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2014.07.02 08:30:53 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_7d243f06e2816846.manifest
[2014.07.14 04:14:06 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_7d253f50e280819d.manifest
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2014.07.02 07:57:49 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29.manifest
[2014.07.14 04:04:09 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2014.07.02 08:07:46 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7.manifest
[2014.07.14 04:04:27 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e.manifest
[2009.07.14 17:16:38 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012.10.06 22:42:01 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023.manifest
[2012.10.07 00:05:03 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2014.07.02 09:46:46 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43.manifest
[2014.07.14 06:02:27 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9.manifest
[2012.10.05 21:59:28 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2014.07.02 10:08:13 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1.manifest
[2014.07.14 06:06:58 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2014.07.02 08:00:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c.manifest
[2014.07.14 04:06:40 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2014.07.02 08:10:04 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a.manifest
[2014.07.14 04:06:53 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2014.07.02 07:58:58 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e.manifest
[2014.07.14 04:05:25 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2014.07.02 08:08:55 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c.manifest
[2014.07.14 04:05:41 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:20 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.18523_none_1c70653de072abde\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 01:43:36 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.22733_none_05a3bea3fa19258c\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 17:17:20 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.07.08 14:43:52 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7601.18523_cs-cz_d5997ba9da0ab4d7\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29\System.Runtime.Serialization.dll
[2014.07.11 00:24:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2014.03.17 16:38:28 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e\System.Runtime.Serialization.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c\System.Runtime.Serialization.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2014.03.17 16:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061\System.Runtime.Serialization.dll
[2009.07.14 17:17:21 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_267606ecf967dbc0\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_289b33b6f65f7b95\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.22731_cs-cz_291801e80f8701c9\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_5f6f957eb0ca0ea1\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.22733_cs-cz_5fee6443c9efc783\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2014.03.09 23:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e\System.Runtime.Serialization.dll
[2014.07.11 00:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll
[2014.03.17 16:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c\System.Runtime.Serialization.dll
[2014.07.08 01:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3\System.Runtime.Serialization.dll

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.22943_none_1398723d3e42b6cc\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.18738_none_131ea4ea25187c9d\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tracedatahelper_31bf3856ad364e35_6.1.7601.23040_none_fecf2d3949aa3367\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-tracedatahelper_31bf3856ad364e35_6.1.7601.18839_none_fe598ad2307c2879\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.2.7601.22562_cs-cz_ec638d1840c0276e\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.2.7601.18361_cs-cz_ebd8ee1d27a37126\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.1.7601.22787_cs-cz_24242539a2007f30\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.1.7601.18581_cs-cz_239484cc88e84a35\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.22793_none_ebc6c37166fbce3b\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.22562_none_ebe62f1f66e466c3\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.18585_none_eb49f5404dd44807\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.18361_none_eb5b90244dc7b07b\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_23a6c740c824be85\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_23a6c740c824be85\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_23a6c740c824be85\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_231726d3af0c898a\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_231726d3af0c898a\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_231726d3af0c898a\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_cd128487ae7b1595\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_cc98e0f89550a54b\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..cesclient.resources_31bf3856ad364e35_7.1.7601.22787_cs-cz_250028df89a089d9\mstsc.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-t..cesclient.resources_31bf3856ad364e35_7.1.7601.18581_cs-cz_24708872708854de\mstsc.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\xmllite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wrpint.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wmiutils.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wmicmiplugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wdscore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wcp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\wbemcomn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\SvcIni.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\smipi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\smiengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\repdrvfs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\PkgMgr.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\OEMHelpIns.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mspatcha.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\msdelta.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mofinstall.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\mofd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\locdrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\helpcins.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\fastprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\esscli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\drvstore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\DrUpdate.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\dpx.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CntrtextInstaller.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmiv2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmitrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\cmiadapter.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CbsMsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\CbsCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apss.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apircl.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_0b32a93025b365c1\apds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-sechost_31bf3856ad364e35_6.1.7601.23040_none_8a2f39b444722263\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-sechost_31bf3856ad364e35_6.1.7601.18839_none_89b9974d2b441775\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23040_none_c6248e46190bf075\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23040_none_c6248e46190bf075\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_c64c001018ed4e03\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_c64c001018ed4e03\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_c651ce8a18e9b35f\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_c651ce8a18e9b35f\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18839_none_c5aeebdeffdde587\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18839_none_c5aeebdeffdde587\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_c5bd89b0ffd3fc44\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_c5bd89b0ffd3fc44\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_c56d0a27000f76af\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_c56d0a27000f76af\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17801_en-us_67c7065fd4e2d7c1\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_638fd7a7765109fc\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_638fd7a7765109fc\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_638fd7a7765109fc\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_638fd7a7765109fc\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_638fd7a7765109fc\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_631a35405d22ff0e\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_631a35405d22ff0e\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_631a35405d22ff0e\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_631a35405d22ff0e\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_631a35405d22ff0e\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23040_none_6e9cbe772b9efe0c\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23040_none_6e9cbe772b9efe0c\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23002_none_6ec9febb2b7cc0f6\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23002_none_6ec9febb2b7cc0f6\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18839_none_6e271c101270f31e\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18839_none_6e271c101270f31e\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18798_none_6de53a5812a28446\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18798_none_6de53a5812a28446\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23040_none_604ab2686917fa47\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23017_none_6072243268f957d5\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23002_none_6077f2ac68f5bd31\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18839_none_5fd510014fe9ef59\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18812_none_5fe3add34fe00616\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18798_none_5f932e49501b8081\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_c9aed724efe96060\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_c9aed724efe96060\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_c9aed724efe96060\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_c9aed724efe96060\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_c9d648eeefcabdee\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_c9dc1768efc7234a\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_c93934bdd6bb5572\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_c93934bdd6bb5572\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_c93934bdd6bb5572\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_c93934bdd6bb5572\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_c947d28fd6b16c2f\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_c8f75305d6ece69a\adtschema.dll:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_191bb56dea5df613\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_191bb56dea5df613\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_191bb56dea5df613\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_191bb56dea5df613\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_19432737ea3f53a1\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_1948f5b1ea3bb8fd\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_18a61306d12feb25\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_18a61306d12feb25\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_18a61306d12feb25\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_18a61306d12feb25\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_18b4b0d8d12601e2\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_1864314ed1617c4d\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17801_none_7342ea0f458d3ec8\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_cdaf82fde9567789\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_cdaf82fde9567789\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17801_none_4d9e16f8b98d820d\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17801_none_fb08630db0d2e8f3\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17801_none_5e497b4053f013ae\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17801_none_790ad24c2b053ed3\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17801_none_6ea7b1c2ee74a4c7\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17801_none_cd990899f70b4a19\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17801_none_163abd03a762e3ab\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17801_none_8c81e4cace0d0171\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_15d220d52a809e2e\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_15d220d52a809e2e\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17801_none_0f4c176cedf33e7b\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17801_en-us_30b4bed011c36062\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17801_none_38354546d4368ec1\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17801_none_c1b0e5749ca8a56d\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17801_none_819deefbc890d37f\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17801_none_fa5c451db44f79f3\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17801_en-us_a8967dfc44fe6a54\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17801_en-us_f48e8a443e4baf90\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17801_none_3bd320b1f59cb267\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17801_en-us_92f4442b603f6d3b\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17801_en-us_110612fc41a473a8\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17801_none_15457eb4aeaad7bd\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17801_none_3aeef080339c3299\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.23038_none_c68d1a7a01c252ee\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.18834_none_c5ffa464e8a81a86\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.23038_none_d51c9e3476dbaa1f\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.18834_none_d48f281f5dc171b7\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23040_none_d9ea1252b42373ca\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23017_none_da11841cb404d158\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23002_none_da175296b40136b4\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.18833_none_d96e6e2f9afad0d2\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_23d5686530564879\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_23fcda2f3037a607\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_2402a8a930340b63\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.18833_cs-cz_2359c442172da581\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.23040_none_e5b4ae80fdfda454\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.18839_none_e53f0c19e4cf9966\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_d79f89ae41567edd\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_d729e747282873ef\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7601.22981_none_0e677e5669e4f94f\AcSpecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7601.18777_none_0deeb14d50b9d877\AcSpecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7601.22981_none_0e667e0c69e5dff8\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7601.18777_none_0dedb10350babf20\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23038_none_5c058d9ba00f5e20\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.23038_none_6cb41eb707098479\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18834_none_83821d6ced61c3a1\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23011_none_2b19399a457dfe3d\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_d1056ab63b89509e\acwow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_d132aafa3b671388\acwow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_d08fc84f225b45b0\acwow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_d04de697228cd6d8\acwow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_7.1.7601.22787_none_a80852ef10524b37\mstsc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_7.1.7601.18581_none_a778b281f73a163c\mstsc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23040_none_afbf729417791cfe\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_afecb2d81756dfe8\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18839_none_af49d02cfe4b1210\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_af07ee74fe7ca338\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23040_none_151a4aa97d6bbe8f\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_15478aed7d498179\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18839_none_14a4a842643db3a1\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_1462c68a646f44c9\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23045_none_8afaef2cb9787449\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23040_none_8af5edbab97cf596\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23002_none_8b232dfeb95ab880\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18843_none_8a6f79aba05c6e8f\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18839_none_8a804b53a04eeaa8\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18798_none_8a3e699ba0807bd0\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23040_none_e5928f7fc6c4e1ed\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23017_none_e5ba0149c6a63f7b\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23002_none_e5bfcfc3c6a2a4d7\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18839_none_e51ced18ad96d6ff\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18812_none_e52b8aeaad8cedbc\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18798_none_e4db0b60adc86827\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23040_none_4fb67fd81507aecd\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23017_none_4fddf1a214e90c5b\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23002_none_4fe3c01c14e571b7\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18839_none_4f40dd70fbd9a3df\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18812_none_4f4f7b42fbcfba9c\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18798_none_4efefbb8fc0b3507\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23040_none_a3acedc3e0ef329e\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23017_none_a3d45f8de0d0902c\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23002_none_a3da2e07e0ccf588\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18839_none_a3374b5cc7c127b0\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18812_none_a345e92ec7b73e6d\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18798_none_a2f569a4c7f2b8d8\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17801_none_34d921c977777dc0\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_30a8ab2a0741f12d\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_30a8ab2a0741f12d\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17801_none_6f5f071140b4d184\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23040_none_c1b680ee6067caeb\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23002_none_c1e3c13260458dd5\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18839_none_c140de874739bffd\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18798_none_c0fefccf476b5125\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_0f2a2d6ec105570b\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_0f2a2d6ec105570b\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_0f519f38c0e6b499\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_0f519f38c0e6b499\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0f576db2c0e319f5\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0f576db2c0e319f5\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_0eb48b07a7d74c1d\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_0eb48b07a7d74c1d\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_0ec328d9a7cd62da\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_0ec328d9a7cd62da\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_0e72a94fa808dd45\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_0e72a94fa808dd45\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.23040_none_8fe21b0018ce2f6f\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.23002_none_900f5b4418abf259\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.18839_none_8f6c7898ffa02481\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.18798_none_8f2a96e0ffd1b5a9\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23040_none_fc9d87edba85a783\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23002_none_fccac831ba636a6d\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18839_none_fc27e586a1579c95\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18798_none_fbe603cea1892dbd\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_b24fd39ea809c3e5\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_b24fd39ea809c3e5\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17801_none_1be11e83638efb40\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_af95b5524c57424f\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17801_none_aaffc9a0a2dc80df\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_ffc231166bb9f593\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17801_none_34a807e18cf53f6b\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_51218b19f7af83c0\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_51218b19f7af83c0\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17801_none_4c65a8c68406df15\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_84456d89cb348cde\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_84456d89cb348cde\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17801_none_85357ad3f756424b\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_c02bb2f816616adb\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_c058f33c163f2dc5\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7601.22981_none_74d7c34e56a5e07b\AcRes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7601.18777_none_745ef6453d7abfa3\AcRes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3dc68ee2b1134b71\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3dc68ee2b1134b71\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3dc68ee2b1134b71\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_3d4dc1d997e82a99\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_3d4dc1d997e82a99\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\wow64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_3d4dc1d997e82a99\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_wpdmtp.inf_31bf3856ad364e35_6.1.7601.22943_none_7e2866b9b68712de\WpdMtpDr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_wpdmtp.inf_31bf3856ad364e35_6.1.7601.18738_none_7dae99669d5cd8af\WpdMtpDr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.22943_none_6fb70dc0f6a02802\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.18738_none_6f3d406ddd75edd3\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_c6b0c06407288ea3\wow64win.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_c6b0c06407288ea3\wow64cpu.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_c6b0c06407288ea3\wow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23040_none_c6b0c06407288ea3\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_c6de00a80706518d\wow64win.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_c6de00a80706518d\wow64cpu.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_c6de00a80706518d\wow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.23002_none_c6de00a80706518d\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_c63b1dfcedfa83b5\wow64win.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_c63b1dfcedfa83b5\wow64cpu.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_c63b1dfcedfa83b5\wow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18839_none_c63b1dfcedfa83b5\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_c5f93c44ee2c14dd\wow64win.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_c5f93c44ee2c14dd\wow64cpu.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_c5f93c44ee2c14dd\wow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-wow64_31bf3856ad364e35_6.1.7601.18798_none_c5f93c44ee2c14dd\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.23040_none_15098efccc2e9285\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.23002_none_1536cf40cc0c556f\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.18839_none_1493ec95b3008797\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.18798_none_14520addb33218bf\winsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.23038_none_17914450ca50d561\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.18834_none_1703ce3bb1369cf9\win32k.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\UtcResources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.23040_none_fe7de82236c5fac8\diagtrack.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\UtcResources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_fe0845bb1d97efda\diagtrack.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tracedatahelper_31bf3856ad364e35_6.1.7601.23040_none_5aedc8bd0207a49d\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tracedatahelper_31bf3856ad364e35_6.1.7601.18839_none_5a782655e8d999af\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\NBMapTIP.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\NBDoc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\MSPVWCTL.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\Journal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\JNTFiltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.23020_none_76522083d4615add\InkSeg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\NBMapTIP.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\NBDoc.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\MSPVWCTL.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\Journal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\JNTFiltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7601.18815_none_75d87cf4bb36ea93\InkSeg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.2.7601.22562_cs-cz_4882289bf91d98a4\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.2.7601.18361_cs-cz_47f789a0e000e25c\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.1.7601.22787_cs-cz_8042c0bd5a5df066\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_7.1.7601.18581_cs-cz_7fb320504145bb6b\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.22793_none_47e55ef51f593f71\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.22562_none_4804caa31f41d7f9\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.18585_none_476890c40631b93d\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.2.7601.18361_none_477a2ba8062521b1\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_7fc562c480822fbb\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_7fc562c480822fbb\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.22787_none_7fc562c480822fbb\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_7f35c2576769fac0\tsgqec.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_7f35c2576769fac0\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_7.1.7601.18581_none_7f35c2576769fac0\aaclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_2931200b66d886cb\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_2931200b66d886cb\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_2931200b66d886cb\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_2931200b66d886cb\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.23020_none_2931200b66d886cb\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_28b77c7c4dae1681\rtscom.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_28b77c7c4dae1681\journal.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_28b77c7c4dae1681\InkObj.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_28b77c7c4dae1681\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_6.1.7601.18815_none_28b77c7c4dae1681\InkDiv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_ac38d243ae6df39e\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_ac38d243ae6df39e\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_ac38d243ae6df39e\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.23020_none_ac38d243ae6df39e\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_abbf2eb495438354\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_abbf2eb495438354\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_abbf2eb495438354\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.1.7601.18815_none_abbf2eb495438354\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_7.1.7601.22787_none_9db3a89cdbf1893c\mstsc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_7.1.7601.18581_none_9d24082fc2d95441\mstsc.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_a105879c7ccea224\PDIALOG.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_a105879c7ccea224\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_a105879c7ccea224\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_a105879c7ccea224\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.23020_none_a105879c7ccea224\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_a08be40d63a431da\PDIALOG.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_a08be40d63a431da\jnwppr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_a08be40d63a431da\jnwmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_a08be40d63a431da\jnwdui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7601.18815_none_a08be40d63a431da\JNWDRV.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..cesclient.resources_31bf3856ad364e35_7.1.7601.22787_cs-cz_811ec46341fdfb0f\mstsc.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..cesclient.resources_31bf3856ad364e35_7.1.7601.18581_cs-cz_808f23f628e5c614\mstsc.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_7.2.7601.22907_none_49d45651b1b3ecd8\TSWbPrxy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_7.2.7601.18699_none_48eb670298dd80e7\TSWbPrxy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23040_none_a56ac841e3185b03\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23040_none_a56ac841e3185b03\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23040_none_a56ac841e3185b03\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_a5980885e2f61ded\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_a5980885e2f61ded\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.23002_none_a5980885e2f61ded\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18839_none_a4f525dac9ea5015\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18839_none_a4f525dac9ea5015\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18839_none_a4f525dac9ea5015\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_a4b34422ca1be13d\srcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_a4b34422ca1be13d\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.18798_none_a4b34422ca1be13d\rstrui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23040_none_0ac5a057490afc94\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23040_none_0ac5a057490afc94\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_0af2e09b48e8bf7e\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.23002_none_0af2e09b48e8bf7e\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18839_none_0a4ffdf02fdcf1a6\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18839_none_0a4ffdf02fdcf1a6\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_0a0e1c38300e82ce\smss.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18798_none_0a0e1c38300e82ce\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\xmllite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wrpint.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wmiutils.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wmicmiplugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wdscore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wcp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wbemprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wbemcore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\wbemcomn.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\SvcIni.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\smipi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\smiengine.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\repdrvfs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\PkgMgr.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\OEMHelpIns.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\mspatcha.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\msdelta.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\mofinstall.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\mofd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\locdrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\helpcins.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\fastprox.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\esscli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\drvstore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\DrUpdate.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\dpx.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\CntrtextInstaller.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\cmiv2.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\cmitrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\cmiadapter.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\CbsMsg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\CbsCore.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\apss.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\apircl.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\apds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-sechost_31bf3856ad364e35_6.1.7601.23040_none_e64dd537fccf9399\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-sechost_31bf3856ad364e35_6.1.7601.18839_none_e5d832d0e3a188ab\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23045_none_80a644da8517b24e\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23040_none_80a14368851c339b\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.23002_none_80ce83ac84f9f685\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18843_none_801acf596bfbac94\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18839_none_802ba1016bee28ad\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.18798_none_7fe9bf496c1fb9d5\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23040_none_db3de52d92641ff2\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23017_none_db6556f792457d80\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.23002_none_db6b25719241e2dc\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18839_none_dac842c679361504\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18812_none_dad6e098792c2bc1\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.18798_none_da86610e7967a62c\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23040_none_4561d585e0a6ecd2\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23017_none_4589474fe0884a60\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.23002_none_458f15c9e084afbc\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18839_none_44ec331ec778e1e4\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18812_none_44fad0f0c76ef8a1\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.18798_none_44aa5166c7aa730c\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23040_none_99584371ac8e70a3\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23017_none_997fb53bac6fce31\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.23002_none_998583b5ac6c338d\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18839_none_98e2a10a936065b5\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18812_none_98f13edc93567c72\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7601.18798_none_98a0bf529391f6dd\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23040_none_224329c9d16961ab\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23040_none_224329c9d16961ab\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_226a9b93d14abf39\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23017_none_226a9b93d14abf39\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_22706a0dd1472495\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23002_none_22706a0dd1472495\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18839_none_21cd8762b83b56bd\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18839_none_21cd8762b83b56bd\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_21dc2534b8316d7a\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18812_none_21dc2534b8316d7a\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_218ba5aab86ce7e5\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.18798_none_218ba5aab86ce7e5\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-scripting-vbscript_31bf3856ad364e35_11.2.9600.17801_none_2a8477774316bbc5\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_265400d7d2e12f32\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-scripting-jscript9_31bf3856ad364e35_11.2.9600.17801_none_265400d7d2e12f32\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-scripting-jscript_31bf3856ad364e35_11.2.9600.17801_none_650a5cbf0c540f89\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_2d7fe646e3ec3705\services.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-s..-jscript9.resources_31bf3856ad364e35_11.2.9600.17801_en-us_c3e5a1e38d4048f7\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-s..-downlevel.binaries_31bf3856ad364e35_6.3.9600.17801_none_5fbe1728ff338aca\MsSpellCheckingFacility.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22947_none_7f90c927c288b059\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22947_none_7f90c927c288b059\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22947_none_7f90c927c288b059\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22787_none_7f6585abc2a925cf\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22787_none_7f6585abc2a925cf\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22787_none_7f6585abc2a925cf\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22678_none_7f7153fbc2a0260e\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22678_none_7f7153fbc2a0260e\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.22678_none_7f7153fbc2a0260e\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18740_none_7f002870a9716207\rdpudd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18740_none_7f002870a9716207\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18740_none_7f002870a9716207\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18581_none_7ed5e53ea990f0d4\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18581_none_7ed5e53ea990f0d4\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18465_none_7eef8458a97d2127\RdpGroupPolicyExtension.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.18465_none_7eef8458a97d2127\rdpcorets.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_bfae732b2eae7b32\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_bfae732b2eae7b32\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_bfae732b2eae7b32\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_bfae732b2eae7b32\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.23040_none_bfae732b2eae7b32\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_bf38d0c415807044\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_bf38d0c415807044\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_bf38d0c415807044\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_bf38d0c415807044\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.18839_none_bf38d0c415807044\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23040_none_cabb59fae3fc6f42\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.23002_none_cae89a3ee3da322c\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18839_none_ca45b793cace6454\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18798_none_ca03d5dbcafff57c\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23040_none_b761d69c2c0708f0\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.23002_none_b78f16e02be4cbda\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18839_none_b6ec343512d8fe02\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ntdll_31bf3856ad364e35_6.1.7601.18798_none_b6aa527d130a8f2a\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23040_none_bc694dec21756b7d\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23017_none_bc90bfb62156c90b\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.23002_none_bc968e3021532e67\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18839_none_bbf3ab850847608f\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18812_none_bc024957083d774c\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7601.18798_none_bbb1c9cd0878f1b7\ncrypt.dll:$CmdTcID

@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_25cd72a8a846d196\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_25cd72a8a846d196\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_25cd72a8a846d196\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23040_none_25cd72a8a846d196\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_25f4e472a8282f24\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_25f4e472a8282f24\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_25f4e472a8282f24\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23017_none_25f4e472a8282f24\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_25fab2eca8249480\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_25fab2eca8249480\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_25fab2eca8249480\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.23002_none_25fab2eca8249480\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_2557d0418f18c6a8\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_2557d0418f18c6a8\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_2557d0418f18c6a8\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18839_none_2557d0418f18c6a8\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_25666e138f0edd65\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_25666e138f0edd65\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_25666e138f0edd65\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18812_none_25666e138f0edd65\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_2515ee898f4a57d0\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_2515ee898f4a57d0\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_2515ee898f4a57d0\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7601.18798_none_2515ee898f4a57d0\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_753a50f1a2bb6749\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_753a50f1a2bb6749\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_753a50f1a2bb6749\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_753a50f1a2bb6749\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_7561c2bba29cc4d7\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_7561c2bba29cc4d7\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_7561c2bba29cc4d7\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_7561c2bba29cc4d7\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_75679135a2992a33\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_75679135a2992a33\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_75679135a2992a33\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_75679135a2992a33\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_74c4ae8a898d5c5b\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_74c4ae8a898d5c5b\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_74c4ae8a898d5c5b\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_74c4ae8a898d5c5b\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_74d34c5c89837318\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_74d34c5c89837318\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_74d34c5c89837318\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_74d34c5c89837318\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_7482ccd289beed83\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_7482ccd289beed83\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_7482ccd289beed83\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-m..ditevtlog.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_7482ccd289beed83\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23040_none_04d5831c8ca49510\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23017_none_04fcf4e68c85f29e\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.23002_none_0502c3608c8257fa\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18839_none_045fe0b573768a22\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18812_none_046e7e87736ca0df\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\sspisrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\lsass.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\lsasrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\ksecpkg.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18798_none_041dfefd73a81b4a\ksecdd.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_a1dc814fdf7a57a3\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_a203f319df5bb531\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_a209c193df581a8d\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_a166dee8c64c4cb5\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18812_cs-cz_a1757cbac6426372\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-lsa.resources_31bf3856ad364e35_6.1.7601.18798_cs-cz_a124fd30c67ddddd\lsasrv.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.23040_none_858d70ade46d6d74\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.23002_none_85bab0f1e44b305e\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.18839_none_8517ce46cb3f6286\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernelbase_31bf3856ad364e35_6.1.7601.18798_none_84d5ec8ecb70f3ae\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23040_none_f248dd9b8624e588\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23002_none_f2761ddf8602a872\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18839_none_f1d33b346cf6da9a\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18798_none_f191597c6d286bc2\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-vgx_31bf3856ad364e35_11.2.9600.17801_none_cf618592fdeaaffe\VGX.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-timeline_is_31bf3856ad364e35_11.2.9600.17801_none_5c007931debcc4c7\Timeline_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-timeline_31bf3856ad364e35_11.2.9600.17801_none_2efa6d737f059b4c\Timeline.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_a7fb294c73a901ea\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_a7fb294c73a901ea\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17801_none_a7fb294c73a901ea\ie4uinit.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_29ce1e81a1b3e8bf\sqmapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_11.2.9600.17801_none_29ce1e81a1b3e8bf\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.2.9600.17801_none_a9bcb27c71eaf343\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-networkinspection_31bf3856ad364e35_11.2.9600.17801_none_5726fe9169305a29\networkinspection.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-mshtmldac_31bf3856ad364e35_11.2.9600.17801_none_ba6816c40c4d84e4\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-memoryanalyzer_31bf3856ad364e35_11.2.9600.17801_none_a5218c4a08c12f8a\MemoryAnalyzer.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_11.2.9600.17801_none_d5296dcfe362b009\jsprofilerui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17801_none_118c74312f2e3945\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17801_none_cac64d46a6d215fd\ieinstal.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ieshims_31bf3856ad364e35_11.2.9600.17801_none_29b7a41daf68bb4f\IEShims.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.2.9600.17801_none_725958875fc054e1\ieproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17801_none_e8a0804e866a72a7\ielowutil.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_a5410b0017f68054\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_a5410b0017f68054\ieetwcollectorres.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17801_none_a5410b0017f68054\ieetwcollector.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrenderingmedia_31bf3856ad364e35_11.2.9600.17801_none_a0ab1f4e6e7bbee4\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_f56d86c437593398\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.2.9600.17801_none_2a535d8f58947d70\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_46cce0c7c34ec1c5\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ieframe_31bf3856ad364e35_11.2.9600.17801_none_46cce0c7c34ec1c5\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_71f0bc58e2de0f64\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ieframe.resources_31bf3856ad364e35_11.2.9600.17801_en-us_71f0bc58e2de0f64\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_11.2.9600.17801_none_4210fe744fa61d1a\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12tools_31bf3856ad364e35_11.2.9600.17801_none_6b6ab2f0a650afb1\F12Tools.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12tools.resources_31bf3856ad364e35_11.2.9600.17801_en-us_8cd35a53ca20d198\F12Tools.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12resources_31bf3856ad364e35_11.2.9600.17801_none_6495e0412266ca2d\F12Resources.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12diagnosticstap_31bf3856ad364e35_11.2.9600.17801_none_9453e0ca8c93fff7\DiagnosticsTap.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12_31bf3856ad364e35_11.2.9600.17801_none_cfdeaf66fd92968e\F12.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-f12.resources_31bf3856ad364e35_11.2.9600.17801_en-us_526d8a5f6ebe76c1\F12.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_79f0c33796d3cae3\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.2.9600.17801_none_79f0c33796d3cae3\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-diagnosticshubis_31bf3856ad364e35_11.2.9600.17801_none_f2198467d673c88c\DiagnosticsHub_is.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-devtools_31bf3856ad364e35_11.2.9600.17801_none_1dcf80f8550616a3\iedvtool.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-datawarehouse_31bf3856ad364e35_11.2.9600.17801_none_28d8ab10159b3c7c\DiagnosticsHub.DataWarehouse.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_11.2.9600.17801_none_ddbc8a7f80ee44b5\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_11.2.9600.17801_none_567ae0a16caceb29\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.2.9600.17801_en-us_04b5197ffd5bdb8a\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_e41367a5b702ca62\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_e41367a5b702ca62\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_11.2.9600.17801_en-us_50ad25c7f6a920c6\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..riptedsandboxplugin_31bf3856ad364e35_11.2.9600.17801_none_3e0651d1808d3ef3\DiagnosticsHub.ScriptedSandboxPlugin.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..riptcollectionagent_31bf3856ad364e35_11.2.9600.17801_none_97f1bc35adfa239d\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..resources.resources_31bf3856ad364e35_11.2.9600.17801_en-us_1d97a48d2cc89eee\F12Resources.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..rendering.resources_31bf3856ad364e35_11.2.9600.17801_en-us_ef12dfaf189cde71\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..osticstap.resources_31bf3856ad364e35_11.2.9600.17801_en-us_6d24ae7ffa01e4de\DiagnosticsTap.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_11.2.9600.17801_none_71641a38670848f3\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17801_none_7ae0d081c2f58050\iexplore.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_11.2.9600.17801_none_970d8c03ebf9a3cf\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.23038_none_54b85527cbffe98c\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.1.7601.18834_none_542adf12b2e5b124\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.23038_none_6347d8e2411940bd\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_6.1.7601.18834_none_62ba62cd27ff0855\FntCache.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.23038_none_22abb5fdba1fc424\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite_31bf3856ad364e35_7.1.7601.18834_none_221e3fe8a1058bbc\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.23038_none_313b39b82f391b55\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-directwrite_31bf3856ad364e35_6.1.7601.18834_none_30adc3a3161ee2ed\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.23040_none_28122f5fd536fea3\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.23002_none_283f6fa3d514c18d\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18839_none_279c8cf8bc08f3b5\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18798_none_275aab40bc3a84dd\csrsrv.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23040_none_d2e6bfab31f3228d\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23002_none_d313ffef31d0e577\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18839_none_d2711d4418c5179f\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18798_none_d22f3b8c18f6a8c7\conhost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-cmitrustinfoinstallers_1122334455667788_6.1.7601.22972_none_f071a959e6f72266\cmitrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-cmitrustinfoinstallers_1122334455667788_6.1.7601.18766_none_eff6dbbccdcdcee0\cmitrust.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23040_none_3608add66c80e500\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23017_none_36301fa06c62428e\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.23002_none_3635ee1a6c5ea7ea\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.18833_none_358d09b353584208\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_7ff403e8e8b3b9af\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23017_cs-cz_801b75b2e895173d\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_8021442ce8917c99\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7601.18833_cs-cz_7f785fc5cf8b16b7\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.23040_en-us_57bf78fb7d33e387\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.1.7601.23002_en-us_57ecb93f7d11a671\ci.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_b9b1b28c9c803d22\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_b9b1b28c9c803d22\winresume.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_b9b1b28c9c803d22\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_b9b1b28c9c803d22\winload.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winresume.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winload.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_37b1a5b279084ad2\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_37b1a5b279084ad2\winresume.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_37b1a5b279084ad2\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_37b1a5b279084ad2\winload.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_37dee5f678e60dbc\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_37dee5f678e60dbc\winresume.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_37dee5f678e60dbc\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_37dee5f678e60dbc\winload.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_91cd67042ce2d6ef\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_91cd67042ce2d6ef\winresume.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_91cd67042ce2d6ef\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_91cd67042ce2d6ef\winload.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_91faa7482cc099d9\winresume.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_91faa7482cc099d9\winresume.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_91faa7482cc099d9\winload.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_91faa7482cc099d9\winload.efi.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23040_none_c7c38f84bca3faf3\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23040_none_c7c38f84bca3faf3\winresume.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23040_none_c7c38f84bca3faf3\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23040_none_c7c38f84bca3faf3\winload.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23040_none_c7c38f84bca3faf3\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winresume.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winresume.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winload.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winload.efi:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\setbcdlocale.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_b5d708a5e200a8e0\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_b5d708a5e200a8e0\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_b5d708a5e200a8e0\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_b5d708a5e200a8e0\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23040_none_b5d708a5e200a8e0\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidpolicyconverter.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidcertstorecheck.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidapi.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appid.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.23040_none_41d34a04b65b158a\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.18839_none_415da79d9d2d0a9c\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_33be2531f9b3f013\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7601.18839_cs-cz_334882cae085e525\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7601.22981_none_6a8619da22426a85\acspecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7601.18777_none_6a0d4cd1091749ad\acspecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7601.22981_none_6a8519902243512e\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7601.18777_none_6a0c4c8709183056\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3371e4907cb28976\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3371e4907cb28976\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3371e4907cb28976\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.22981_none_3371e4907cb28976\aelupsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_32f917876387689e\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_32f917876387689e\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_32f917876387689e\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.18777_none_32f917876387689e\aelupsvc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23038_none_145856c48b93351a\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_2b26557a71eb7442\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.23038_none_2506e7dff28d5b73\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.7601.18834_none_3bd4e695d8e59a9b\GdiPlus.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23011_none_e36c02c33101d537\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52\comctl32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Temp\InstHelper.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Temp\avast_ash\Mozilla Firefox\updater.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Temp\avast_ash\Mozilla Firefox\update.xml:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Temp\0EA003A0-E0B5-427C-BF36-73C7BC887743\DismHost.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\tspkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\FlashPlayerApp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\en-US\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWOW64\cs-CZ\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\SysWow64\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wpdshext.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wow32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wininet.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\wdigest.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\vbscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\user.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\urlmon.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\typeperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\TSpkg.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\tracerpt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\tdh.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sspicli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\srclient.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\schannel.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\shimeng.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\setup16.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sechost.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\secur32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\sdbinst.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\relog.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\poqexec.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntvdm64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntoskrnl.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntkrnlpa.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ntdll.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ncrypt.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msv1_0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mstscax.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msrating.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msobjs.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtmlmedia.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtmled.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\MshtmlDac.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\mshtml.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msfeeds.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\msaudite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\logman.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\KernelBase.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\kernel32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\kerberos.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jsproxy.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript9diag.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript9.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\jscript.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\JavaScriptCollectionAgent.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\instnm.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\InkEd.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\inetcpl.cpl:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieUnatt.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieui.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iesetup.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iertutil.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iernonce.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieframe.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieetwproxystub.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\iedkcs32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\ieapfltr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\FlashPlayerApp.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\urlmon.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\mshtml.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\jscript9.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\inetcpl.cpl.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\ieui.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\en-US\ieframe.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dxtrans.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\dxtmsft.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DWrite.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_9bb06c3cf57e5001\WpdMtpDr.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\diskperf.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\mstscax.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\msobjs.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\msaudite.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\certcli.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\auditpol.exe.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\advapi32.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\cs-CZ\adtschema.dll.mui:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\credssp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\certcli.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\auditpol.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\apphelp.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\apisetschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\advapi32.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\System32\adtschema.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\avastSS.scr:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\AppPatch64\acspecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\AppPatch64\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\acwow64.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\AcSpecfc.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\AcRes.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Windows\AppPatch\AcGenral.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Petr\Desktop\raidcall_v7.3.6.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Petr\Desktop\OTL.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Petr\Desktop\eset_nod32_antivirus_live_installer_.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Users\Petr\Desktop\avast_free_antivirus_setup_online.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\AVAST Software\Avast\AvastUI.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_0d1e4cccf34bdee0\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_0d4b8d10f329a1ca\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_0ca8aa65da1dd3f2\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_0c66c8adda4f651a\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23040_none_693ce850aba95016\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23002_none_696a2894ab871300\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18839_none_68c745e9927b4528\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18798_none_6885643192acd650\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YJR5FYJZ\loader[1].js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVPNGRMQ\loader.min[1].js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Petr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LV22DN8M\preloaderMusic[1].js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\2.2.0.18_0\js\scriptLoader.js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Users\Petr\AppData\Local\Comodo\Chromodo\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\2.2.0.18_0\js\configLoader.js:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\AVAST Software\Avast\ng\aswSfLoader.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\AVAST Software\Avast\aswWrcIELoader64.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe:$CmdTcID
@Alternate Data Stream - 40 bytes -> C:\ProgramData\MTA San Andreas All:NT
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\raidcall_v7.3.6.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\OTL.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\Manian - Welcome to the Club(Official Video).mp3:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\eset_nod32_antivirus_live_installer_.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\Different Heaven & EH!DE - My Heart.mp3:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Users\Petr\Desktop\avast_free_antivirus_setup_online.exe:$CmdZnID
@Alternate Data Stream - 21 bytes -> \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\wws_crashreport_uploader.exe:crc
@Alternate Data Stream - 21 bytes -> \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\LaunchPad.libs\wws_crashreport_uploader.exe:crc
@Alternate Data Stream - 21 bytes -> \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\APEX_Loader_x86.dll:crc
@Alternate Data Stream - 21 bytes -> \Users\Public\Sony Online Entertainment\Installed Games\PlanetSide 2\APEX_Loader_x64.dll:crc
@Alternate Data Stream - 160 bytes -> C:\ProgramData\MTA San Andreas All:NT2

< End of report >

OTL Extras logfile created on: 17.5.2015 12:47:34 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Petr\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17801)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,96 Gb Total Physical Memory | 4,97 Gb Available Physical Memory | 62,45% Memory free
15,92 Gb Paging File | 12,31 Gb Available in Paging File | 77,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 732,42 Gb Total Space | 58,19 Gb Free Space | 7,94% Space Free | Partition Type: NTFS
Drive D: | 1130,50 Gb Total Space | 1116,09 Gb Free Space | 98,73% Space Free | Partition Type: NTFS

Computer Name: PETR-PC | User Name: Petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2840795496-512860511-4266877744-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{99ABB425-DF5D-4B87-A897-296241CEEFA5}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{047E66E4-6B51-41E7-AFAB-631C8604F827}" = protocol=6 | dir=in | app=c:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe |
"{4A7A71CE-816F-47EB-B030-DDCC8C6A2CAC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{4D2C93D3-6441-4D8D-BDFF-4AA8FFF85C28}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dragons&titans\dnt.exe |
"{5BF0F859-8136-4788-8D10-2B761978644B}" = protocol=6 | dir=in | app=c:\users\petr\appdata\local\hola\firefox\app\hola_plugin.exe |
"{5EF9FFFF-CEAD-4924-BE3A-96782BBD9041}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\toribash\toribash.exe |
"{77F16814-ECD3-4EA8-8ABA-C14B1E90BB9C}" = protocol=17 | dir=in | app=c:\users\petr\appdata\roaming\utorrent\utorrent.exe |
"{8E10BE67-8960-4B4B-8A21-B26C37915446}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\toribash\toribash.exe |
"{922D9584-76FA-44F8-939B-A31C37E9141F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tera\tera-launcher.exe |
"{AEDECC09-CEB1-4355-88A4-5650FB88BE01}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{AF153FA8-516E-45D2-A2BF-E0674617E5D4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dragons&titans\dnt.exe |
"{B274C106-8F1A-47B1-B857-66184EACEE1C}" = protocol=17 | dir=in | app=c:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe |
"{C1D354E2-A265-4AD7-9753-667E01287600}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C73C1F7E-B839-4635-9B86-B7767A0260A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\robocraft\robocraft.exe |
"{C76546CA-5424-4B1F-BD78-692985992C2E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\robocraft\robocraft.exe |
"{CC028D72-ECA9-4BCB-888C-9D0FF7A4BE4D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{E55702DE-D690-4EB4-8225-944DF3C0C727}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tera\tera-launcher.exe |
"{E5E2D141-4986-484B-9844-921B5038188E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{F31818B3-22FC-45C1-AFD3-626926BCF018}" = protocol=6 | dir=in | app=c:\users\petr\appdata\roaming\utorrent\utorrent.exe |
"{FC956791-18E3-4721-BAC7-C0E45B84FB7A}" = protocol=17 | dir=in | app=c:\users\petr\appdata\local\hola\firefox\app\hola_plugin.exe |
"TCP Query User{057F9864-816D-4281-B770-B79B4B87AF82}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{3A2EE778-F687-4759-8AC8-B70C9D515DCC}C:\users\petr\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\petr\appdata\local\akamai\netsession_win.exe |
"TCP Query User{744A11E3-D747-409B-B710-551F01A31CB2}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe" = protocol=6 | dir=in | app=c:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe |
"UDP Query User{93E46590-7C8D-4229-A391-0AAD794F5516}C:\users\petr\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\petr\appdata\local\akamai\netsession_win.exe |
"UDP Query User{AC52E066-10FE-4481-AB66-D29893ECB072}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe" = protocol=17 | dir=in | app=c:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe |
"UDP Query User{C77A4909-365D-4928-BD98-E5DB9C0144F7}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{14297226-E0A0-3781-8911-E9D529552663}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{338CE2A1-7BD6-AC18-0069-4A90F7C3D836}" = AMD Steady Video Plug-In
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5941D535-34BF-BB6E-E52B-F464E4E955FF}" = AMD Media Foundation Decoders
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64353004-AB3A-434D-8B97-85FFC6AE841A}" = GeekBuddy
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{73830292-868E-4C82-9AF5-CCFE2047B6A3}" = COMODO Firewall
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8C3E2581-B212-D5C6-35A1-DD5A9C3DA29B}" = AMD Accelerated Video Transcoding
"{90140000-0015-0405-1000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-1000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-1000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-1000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-1000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0405-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Czech) 2010
"{90140000-0044-0405-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{91140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{AF88A32E-BC54-2AA3-2FC8-D63D86DF4A7A}" = AMD Catalyst Install Manager
"{CF2A565B-1504-BD48-51B5-1D88C621D8C6}" = ccc-utility64
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{D6885DDE-4632-4640-A3BB-13C9F02CE81C}" = ESET NOD32 Antivirus
"{E6277150-51D1-1D9F-1B9F-2D28985BE167}" = AMD Fuel
"{E74DBCA2-F0BC-929D-0504-87E97079EB4A}" = AMD Drag and Drop Transcoding
"CCleaner" = CCleaner
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Totalcmd64" = Total Commander 64-bit (Remove or Repair)
"Virtual Audio Cable 4.10" = Virtual Audio Cable 4.10
"WinRAR archiver" = WinRAR 5.00 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01BD4FC9-2F86-4706-A62E-774BB7E9D308}" = AVG PC TuneUp 2014
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08A25478-C5DD-4EA7-B168-3D687CA987FF}" = The Sims™ 3 Изысканная спальня Каталог
"{117B6BF6-82C3-420C-B284-9247C8568E53}" = The Sims™ 3 Отдых на природе Каталог
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{17630FD1-B14A-4CA5-A627-B6B5F7DD41CF}" = 3TB+Unlock B12.1102.1
"{183F67DB-676D-9629-BB8D-5D91CFC5880C}" = CCC Help Chinese Traditional
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1A21C23B-1049-036F-538C-40827D35D35B}" = CCC Help Czech
"{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}" = The Sims™ 3 Diesel Каталог
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}" = PDF Settings CC
"{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1" = RaceRoom Racing Experience Launcher
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{21EF236B-A428-0641-0A9A-6A9A74BA1996}" = CCC Help Finnish
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.4
"{26A24AE4-039D-4CA4-87B4-2F83218040F0}" = Java 8 Update 40
"{28D1723C-31C4-4A83-9799-DFFB3739026D}" = Warface Launcher (Beta)
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}" = Adobe Photoshop CC
"{2E7170BC-A6CB-3C69-A940-A07834EAE1E8}" = CCC Help Italian
"{317243C1-6580-4F43-AED7-37D4438C3DD5}" = Adobe After Effects CC
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3450767E-DD72-E31C-CCA5-8F45FF5FCE08}" = AMD VISION Engine Control Center
"{3A027737-A119-FABD-4C43-8385D57FC450}" = Catalyst Control Center Localization All
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3BBFD444-5FAB-49F6-98B1-A1954E831399}" = The Sims™ 3 Шоу-бизнес
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}" = Smite
"{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service
"{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}" = QuickTime 7
"{3D9C083F-F0B4-4C43-8C4A-9D5711A64B9C}" = 4S4Vendeta
"{3DE92282-CB49-434F-81BF-94E5B380E889}" = The Sims™ 3 Времена года
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B12.1025.1
"{45017FF9-8ABB-DFDE-6BFD-43C8D89277F4}" = CCC Help Norwegian
"{45057FCE-5784-48BE-8176-D9D00AF56C3C}" = The Sims™ 3 В сумерках
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B13.0125.1
"{45BB2BC0-6CD3-457D-A70B-B1E4AF929189}_is1" = S.T.A.L.K.E.R. - Call of Pripyat verze 1.602
"{45E7C481-3EF4-4FCB-AF0B-19F70D618F0C}" = Worms 4 Mayhem
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{494642A2-96C3-FBF9-A43D-41D78A82AE15}" = CCC Help Hungarian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4FD6306A-E967-F286-DBA1-2A3C26833A2C}" = CCC Help French
"{505FF1AC-E7F5-4462-BBA7-08900E7E9EEF}" = Adobe Premiere Pro CC
"{52C32940-C538-40CF-8DE9-B91090F49938}" = Infovox Desktop 2.2
"{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1" = Adobe Update Management Tool
"{59E04C6D-9EE0-4F70-9358-62108888C719}" = 2010 DR PEPPER EA GAMES EVERY BOTTLE/CUP WINS PROMOTION
"{5BA86B8D-D29E-071C-5D7B-E579A54698AD}" = CCC Help Spanish
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{63CEA2E4-4FE7-4F2C-B388-C1313D24157C}" = SPORE™ Galaktická dobrodružství
"{6B84E528-9705-4D36-9C97-97B8E23DAB75}" = League of Legends
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6E6F22D7-8AD6-4A87-9A47-733E6E996F50}" = Dead Space
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = The Sims™ 3 Современная роскошь Каталог
"{71A79918-3497-16D0-3497-E3356F5EE5FB}" = CCC Help Chinese Standard
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76D0F60C-D265-CFA4-2E06-41E434F9EB41}" = CCC Help Thai
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78FD6E08-6996-7EBF-E3F8-905836E7C220}" = CCC Help Dutch
"{79A3E8B6-37C0-5F75-7E7D-F4D6FB512329}" = CCC Help Japanese
"{7A8B5F7D-6736-4DC4-A7A5-223BE131EB34}" = AVG PC TuneUp 2014 (cs-CZ)
"{7B11296A-F894-449C-8DF6-6AAAA7D4D118}" = The Sims™ 3 Городская жизнь Каталог
"{7f51bdb9-ee21-49ee-94d6-90afc321780e}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
"{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX
"{80EE9168-BB59-4F87-BF1A-57C137EAF714}" = LogMeIn Hamachi
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8B526040-C3BE-5E3F-E6C1-C01BD32BA2C6}" = CCC Help Greek
"{9068D15E-25B4-EC21-9BC4-8DBD52722F8E}" = CCC Help Russian
"{90A4562F-D4A1-4B65-906D-41F236CF6902}" = Path of Exile
"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Карьера
"{962E05CF-3394-496D-0091-850CF1762F6B}" = The Battle for Middle-earth (tm)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AC111C4-AC8B-4CB1-A8DE-FDA68200685C}_is1" = Sun Age
"{9B2506E3-9A3F-45B5-96BF-509CAD584650}" = The Sims™ 3 Katy Perry Сладкие радости
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA46B5F5-6E96-A623-5AB4-93BE56BEBB28}" = CCC Help Danish
"{AC4BBB17-A837-3B36-83D8-7DFC90505F95}" = CCC Help Portuguese
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3
"{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Origins
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}" = The Sims™ 3 Сверхъестественное
"{B3CDED64-7DC2-429D-A325-BBC3CF793AA6}" = Gaming Keyboard Driver
"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = The Sims™ 3 Мир приключений
"{BC8CEB2B-647B-BBF1-3923-6250AFA64081}" = CCC Help Polish
"{BD8B4CA0-CBB8-42BA-A530-149059738C4A}_is1" = Freedom Force vs the 3rd Reich
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C07F8D75-7A8D-400E-A8F9-A3F396B49BB1}" = SPORE™ Balíček strašidelných a roztomilých doplňků
"{C12631C6-804D-4B32-B0DD-8A496462F106}" = The Sims™ 3 Питомцы
"{C3592426-531E-4110-911D-BFECE2CE284B}" = puush
"{C3E176C6-FF76-4734-929D-8E5FB9CC2E05}_is1" = STALKER - Shadow of Chernobyl verze 1.0006
"{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}" = Nokia Connectivity Cable Driver
"{C6B0FBD0-067F-5ED3-B4C1-BC61284A1079}" = Catalyst Control Center InstallProxy
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B12.1220.1
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{CED8E25B-122A-4E80-B612-7F99B93284B3}" = Arc
"{D73E5C3C-6975-6957-3799-AB306D8189B0}" = CCC Help Korean
"{DB21639E-FE55-432C-BCA2-0C5249E3F79E}" = The Sims™ 3 Райские острова
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E05B61A8-A743-57ED-C0BA-6332CC6452FF}" = CCC Help German
"{E1868CAE-E3B9-4099-8C18-AA8944D336FD}" = The Sims™ 3 Стильные 70-е, 80-е, 90-е Каталог
"{E22F5B3F-6D82-7354-F199-0EFFDCC4DD33}" = CCC Help Swedish
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5EB7710-29E1-47E3-9636-0E8CA5B0D3CA}_is1" = Warcraft III verze 1.22
"{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}" = The Sims™ 3 Все возрасты
"{EAA01BA0-6991-4296-A404-4FFF2DAC2225}" = ParaWorld
"{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}" = The Sims™ 3 Скоростной режим Каталог
"{F0319215-C109-C2C9-ECBC-3F08C50E59B3}" = CCC Help Turkish
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}" = The Sims™ 3 Студенческая жизнь
"{F8A47958-47CC-4B57-AE7D-7DDC0A86BEF5}" = XSplit Broadcaster
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}" = Wing Commander III
"{FBE18FE1-05A4-C5AD-571A-74BC335FDDC6}" = CCC Help English
"{FE2D627E-D7E0-46EA-93A6-8583420285FA}" = Aeria Ignite
"«The Sims 3 Deluxe Edition»_is1" = «The Sims 3 Deluxe Edition» (build 9.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 17 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI
"Aeria Ignite" = Aeria Ignite
"Aeria Ignite 1.13.3296" = Aeria Ignite
"AirRivals_is1" = AirRivals
"Audacity_is1" = Audacity 2.0.5
"Avast" = Avast Free Antivirus
"Battle.net" = Battle.net
"Battlelog Web Plugins" = Battlelog Web Plugins
"DAEMON Tools Lite" = DAEMON Tools Lite
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Dračí oko" = Dračí oko
"Fraps" = Fraps (remove only)
"Google Chrome" = Google Chrome
"Hearthstone" = Hearthstone
"Heroes of the Storm" = Heroes of the Storm
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"Chromodo" = Chromodo
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Ovladače zařízení
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B13.0125.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B12.1220.1
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"League of Legends 3.0.1" = League of Legends
"LogMeIn Hamachi" = LogMeIn Hamachi
"Minecraft1.7.2" = Minecraft1.7.2
"Mount&Blade With Fire and Sword" = Mount&Blade With Fire and Sword
"Mozilla Firefox 29.0.1 (x86 cs)" = Mozilla Firefox 29.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"RaidCall" = RaidCall
"RPGVXAce_RTP_is1" = RPG MAKER VX Ace RTP
"Saints Row The Third_is1" = Saints Row The Third
"SpeedFan" = SpeedFan (remove only)
"StarCraft II" = StarCraft II
"Steam App 208090" = Loadout
"Steam App 222900" = Dead Island: Epidemic
"Steam App 223530" = Left 4 Dead 2 Beta
"Steam App 234710" = Poker Night 2
"Steam App 242720" = GunZ 2: The Second Duel
"Steam App 248570" = Toribash
"Steam App 263500" = Dragons and Titans
"Steam App 301520" = Robocraft
"Steam App 304930" = Unturned
"Steam App 323370" = TERA
"Steam App 33910" = Arma 2
"Steam App 4000" = Garry's Mod
"Steam App 440" = Team Fortress 2
"Steam App 550" = Left 4 Dead 2
"Steam App 563" = Left 4 Dead 2 Authoring Tools
"Steam App 570" = Dota 2
"Steam App 70000" = Dino D-Day
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 730" = Counter-Strike: Global Offensive
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 9" = TeamViewer 9
"TextAloud3_is1" = TextAloud 3.0
"The Forest_is1" = The Forest version 0.05
"Tunngle_is1" = Tunngle
"VLC media player" = VLC media player
"Wolfteam" = Wolfteam
"WolfTeam International_is1" = WolfTeam International
"World of Warcraft" = World of Warcraft

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2840795496-512860511-4266877744-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes (Petr)
"Akamai" = Akamai NetSession Interface
"d8f4b4d52e33052f" = Skype Voice Changer
"Dropbox" = Dropbox
"MK LOL" = MK LOL
"MKLOL" = MKLOL
"SeznamInstall" = Seznam Software
"SOE-PlanetSide 2" = PlanetSide 2
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 19.10.2014 3:35:35 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5b8 Čas spuštění chybující aplikace: 0x01cfea9b10956e0a Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 82c86a3d-5762-11e4-891c-94de8075019c

Error - 19.10.2014 6:45:00 | Computer Name = Petr-PC | Source = Application Hang | ID = 1002
Description = Program TheForest.exe verze 4.5.1.22013 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
d10 Čas spuštění: 01cfeb898c6ac0b6 Čas ukončení: 46 Cesta k aplikaci: C:\Program Files
(x86)\GMT-MAX.ORG\The Forest\TheForest.exe ID hlášení:

Error - 19.10.2014 16:32:45 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x580 Čas spuštění chybující aplikace: 0x01cfeb88ec1a9dc7 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 14badf45-57cf-11e4-82f3-94de8075019c

Error - 20.10.2014 16:59:52 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5b0 Čas spuštění chybující aplikace: 0x01cfec61a2beb8b6 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 08cb7f99-589c-11e4-88d5-94de8075019c

Error - 21.10.2014 15:28:21 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5b0 Čas spuštění chybující aplikace: 0x01cfed4a5dcc06b7 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 6ab19027-5958-11e4-b35b-94de8075019c

Error - 22.10.2014 4:12:23 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5ac Čas spuštění chybující aplikace: 0x01cfedc5d3003764 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 26871978-59c3-11e4-be52-94de8075019c

Error - 22.10.2014 10:37:13 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x578 Čas spuštění chybující aplikace: 0x01cfee03c37eca0f Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: e912204a-59f8-11e4-8aca-94de8075019c

Error - 22.10.2014 15:32:16 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5b4 Čas spuštění chybující aplikace: 0x01cfee114dd71119 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 20f30c46-5a22-11e4-9d10-94de8075019c

Error - 22.10.2014 16:23:17 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5ac Čas spuštění chybující aplikace: 0x01cfee320c0189f5 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: 4162d71c-5a29-11e4-ad33-94de8075019c

Error - 23.10.2014 10:35:33 | Computer Name = Petr-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Fuel.Service.exe, verze: 1.0.0.0, časové
razítko: 0x501fefb5 Název chybujícího modulu: Device.dll, verze: 4.1.0.0, časové
razítko: 0x4f55e10b Kód výjimky: 0xc0000005 Posun chyby: 0x00000000000033c1 ID chybujícího
procesu: 0x5bc Čas spuštění chybující aplikace: 0x01cfee899f0bf285 Cesta k chybující
aplikaci: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe Cesta
k chybujícímu modulu: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll ID
zprávy: d7e26a0f-5ac1-11e4-983c-94de8075019c

[ System Events ]
Error - 17.5.2015 5:36:46 | Computer Name = Petr-PC | Source = Application Popup | ID = 875
Description = Načtení ovladače atksgt.sys je blokováno.

Error - 17.5.2015 5:36:46 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7000
Description = Služba atksgt neuspěla při spuštění v důsledku následující chyby:
%%1275

Error - 17.5.2015 5:38:11 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby LogMeIn Hamachi Tunneling Engine bylo
dosaženo časového limitu (30000 ms).

Error - 17.5.2015 5:38:11 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Hamachi Tunneling Engine neuspěla při spuštění v důsledku
následující chyby: %%1053

Error - 17.5.2015 5:38:17 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: prodrv06 prohlp02 prosync1 sfhlp01

Error - 17.5.2015 5:38:22 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7034
Description = Služba Skype Click to Call PNR Service byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 17.5.2015 5:38:24 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7034
Description = Služba Skype Click to Call Updater byla neočekávaně ukončena. Tento
stav nastal již 1krát.

Error - 17.5.2015 5:40:32 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7031
Description = Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena.
Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund:
Restartovat službu.

Error - 17.5.2015 5:41:02 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7032
Description = Správce služeb se pokusil o opravnou akci (Restartovat službu) po
nečekaném ukončení služby Služba Windows Media Player Network Sharing, ale tato
akce selhala kvůli následující chybě: %%1056

Error - 17.5.2015 5:42:22 | Computer Name = Petr-PC | Source = Service Control Manager | ID = 7031
Description = Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena.
Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund:
Restartovat službu.


< End of report >

Ten system asi moc legalni nebude, ze?

Jestli je legální nevím ale jak jsem to koupil tak to mám a se systémem jsem nic nedělal

K aktivaci byl pouzity nelegalni aktivator. A cpat ho do legalniho systemu asi nikdo nebude


A bohuzel pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512

Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.

21.6. http://forum.viry.cz/viewtopic.php?f=12&t=123975