VIRY.CZ

Dobry vecer,

Chcel by som poprosit o kontrolu logu z RSIT. Ide uz o starsi pocitac, ktory ma 5 rokov ale myslim si, ze problem bude softwarovy. Nahle prestal fungovat Windows Update, siet taktiez nefunguje spravne, neda sa dostat do nudzoveho rezimu, pocitac je velmi pomaly atd..
Nech sa paci:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Daniel at 2016-02-01 21:27:40
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 41 GB (27%) free of 152 GB
Total RAM: 4094 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:28:03, on 1. 2. 2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16520)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera_crashreporter.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
C:\Program Files\trend micro\Daniel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files (x86)\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent Sync] "C:\Program Files (x86)\BitTorrent Sync\BTSync.exe" /MINIMIZED
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Viber] "C:\Users\Daniel\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Unknown owner - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (file missing)
O23 - Service: avast! Firewall - Unknown owner - C:\Program Files\AVAST Software\Avast\afwServ.exe (file missing)
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B20\win_b64\code\bin\CATSysDemon.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10074 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Dassault Systemes\B20\win_b64\code\bin\CATSysDemon.exe" -service
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {1634FE88-270E-46BF-BCBC-85BF7AD3BFD1}
"C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe"
"C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe"
"C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe"
"C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
WLIDSvcM.exe 2436
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe" /SPEAKER
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
C:\Windows\splwow64.exe 8192
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\34.0.2036.50\opera_crashreporter.exe" --ran-launcher --crash-reporter-parent-id=2664
"C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe" --type=gpu-process --channel="2664.0.1181406399\1182706673" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=4528 --enable-proprietary-codecs-support-for-web-audio-api --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,29,57 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x9591 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.970.100.1100 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=4528 --enable-proprietary-codecs-support-for-web-audio-api --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=en-US --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=4528 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="2664.2.828789142\868944939" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=en-US --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=4528 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="2664.3.1529951933\1565101113" /prefetch:673131151
"C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=en-US --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --crash-reporter-pid=4528 --enable-proprietary-codecs-support-for-web-audio-api --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --channel="2664.4.1251185314\24042308" /prefetch:673131151
"C:\Users\Daniel\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\d9h2h6hu.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.286 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.286 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2009-08-21 497504]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2009-03-09 52600]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2009-08-05 909624]
"HDMICtrlMan"=C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe [2009-08-03 1032536]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-08-14 1573160]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2726728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"BitTorrent Sync"=C:\Program Files (x86)\BitTorrent Sync\BTSync.exe /MINIMIZED []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Viber"=C:\Users\Daniel\AppData\Local\Viber\Viber.exe StartMinimized []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-30 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"Camera Assistant Software"=C:\Program Files (x86)\Camera Assistant Software for Toshiba\traybar.exe [2009-04-10 417792]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-01 21:27:40 ----D---- C:\rsit
2016-02-01 21:27:40 ----D---- C:\Program Files\trend micro
2016-01-25 20:45:03 ----D---- C:\Windows\system32\catroot2
2016-01-25 20:40:45 ----D---- C:\Windows\SoftwareDistribution
2016-01-25 18:59:57 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2016-01-25 18:59:26 ----D---- C:\ProgramData\Malwarebytes
2016-01-25 18:59:26 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-25 18:59:26 ----A---- C:\Windows\system32\drivers\mwac.sys
2016-01-25 18:59:26 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2016-01-25 18:59:26 ----A---- C:\Windows\system32\drivers\mbam.sys
2016-01-13 17:27:53 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-01-08 22:47:15 ----D---- C:\ProgramData\Package Cache
2016-01-08 22:44:08 ----D---- C:\GOG Games
2016-01-08 21:53:34 ----D---- C:\ProgramData\LogMeIn

======List of files/folders modified in the last 1 month======

2016-02-01 21:27:42 ----D---- C:\Windows\Temp
2016-02-01 21:27:40 ----D---- C:\Program Files
2016-02-01 21:25:26 ----D---- C:\Users\Daniel\AppData\Roaming\Skype
2016-02-01 21:24:30 ----D---- C:\Windows\System32
2016-02-01 21:24:30 ----D---- C:\Windows\inf
2016-02-01 21:24:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-01-28 22:37:14 ----D---- C:\Windows\system32\drivers
2016-01-28 22:37:14 ----D---- C:\Windows\ShellNew
2016-01-28 22:36:14 ----D---- C:\Windows\SysWOW64
2016-01-28 21:06:11 ----D---- C:\Program Files (x86)\TeamViewer
2016-01-27 21:50:40 ----D---- C:\Windows
2016-01-25 21:03:22 ----D---- C:\Windows\system32\config
2016-01-25 21:03:02 ----D---- C:\Windows\winsxs
2016-01-25 20:15:01 ----D---- C:\Windows\system32\catroot
2016-01-25 20:12:52 ----D---- C:\Windows\system32\catroot2.bak
2016-01-25 20:12:33 ----SHD---- C:\System Volume Information
2016-01-25 20:10:04 ----D---- C:\Program Files (x86)\Common Files
2016-01-25 20:09:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-01-25 20:09:49 ----RD---- C:\Program Files (x86)
2016-01-25 20:07:53 ----SHD---- C:\Windows\Installer
2016-01-25 20:05:32 ----D---- C:\Program Files (x86)\Intel
2016-01-25 19:56:17 ----A---- C:\Windows\ntbtlog.txt
2016-01-25 19:21:23 ----D---- C:\Windows\Performance
2016-01-25 18:59:26 ----HD---- C:\ProgramData
2016-01-24 20:04:49 ----D---- C:\Counter-Strike 1.6
2016-01-22 19:48:12 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-20 19:23:52 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-01-20 17:52:43 ----D---- C:\Program Files (x86)\Opera
2016-01-20 17:52:42 ----D---- C:\Windows\system32\Tasks
2016-01-08 22:41:26 ----D---- C:\Users\Daniel\AppData\Roaming\uTorrent
2016-01-06 13:04:50 ----D---- C:\ProgramData\CanonIJPLM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-11-14 283064]
R1 LUMDriver;LUMDriver; \??\C:\Windows\system32\drivers\LUMDriver.sys [2008-01-02 24848]
R1 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2015-10-05 109272]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2009-09-03 67072]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2009-09-03 54784]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2009-09-03 57856]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-04-30 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-04-30 359936]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 FwLnk;FwLnk Driver; C:\Windows\system32\DRIVERS\FwLnk.sys [2006-11-19 8704]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-10-05 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2016-02-01 192216]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-01-13 7675392]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-08-14 260144]
R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2009-04-10 20520]
S0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys []
S0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys []
S1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys []
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys []
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys []
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys []
S2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys []
S2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys []
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-04-30 11922944]
S3 cpuz135;cpuz135; \??\D:\PC Wizard 2012\pcwiz_x64.sys [2012-02-07 23816]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2013-02-05 57840]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2015-11-12 34720]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-10-05 63704]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\DRIVERS\ser2pl64.sys [2007-07-31 90112]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-04-30 238080]
R2 BBDemon;Backbone Service; C:\Program Files\Dassault Systemes\B20\win_b64\code\bin\CATSysDemon.exe [2009-09-26 46592]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-09-11 5702416]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2009-08-21 488800]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe []
S2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2013-02-05 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08 144200]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-01-13 148136]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-11-14 1255736]
S4 NetMsmqActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]
S4 NetPipeActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]
S4 NetTcpActivator;@%SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 116560]

-----------------EOF-----------------

Zdravím!
Jak je na tom váš oper. systém s legalitou?

jedna sa samozrejme o legalny system

Udělejte následující sken:

Stáhněte a spusťte OTL: http://oldtimer.geekstogo.com/OTL.exe . Spusťte, zaškrněte "Pro všechny uživatele", Kontrola na havěť LOP" a Kontrola na hvěť PURITY" a do dolního bílého okna zkopírujte:

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s

a klikněte na >Prohledat<. Dejte oba logy.

nech sa paci:

OTL logfile created on: 2. 2. 2016 20:33:39 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Daniel\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 50,71% Memory free
7,99 Gb Paging File | 5,58 Gb Available in Paging File | 69,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,89 Gb Total Space | 39,50 Gb Free Space | 26,53% Space Free | Partition Type: NTFS
Drive D: | 147,73 Gb Total Space | 65,17 Gb Free Space | 44,11% Space Free | Partition Type: NTFS
Drive G: | 3,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2016/02/02 20:29:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
PRC - [2016/01/25 19:02:34 | 006,212,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2016/01/20 17:52:22 | 000,504,952 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\34.0.2036.50\opera_crashreporter.exe
PRC - [2016/01/20 17:52:21 | 000,630,392 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\34.0.2036.50\opera.exe
PRC - [2015/10/05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2015/09/11 16:34:17 | 005,352,208 | ---- | M] (TeamViewer GmbH) -- c:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
PRC - [2015/09/11 16:34:16 | 018,484,496 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer.exe
PRC - [2015/09/11 16:34:16 | 005,702,416 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
PRC - [2015/09/11 16:22:54 | 000,230,672 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\tv_w32.exe
PRC - [2010/04/02 10:18:54 | 001,185,112 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
PRC - [2009/07/29 16:42:06 | 000,705,880 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe


========== Modules (No Company Name) ==========

MOD - [2016/01/20 17:52:21 | 061,568,120 | ---- | M] () -- C:\Program Files (x86)\Opera\34.0.2036.50\opera.dll
MOD - [2016/01/20 17:52:03 | 001,983,096 | ---- | M] () -- C:\Program Files (x86)\Opera\34.0.2036.50\libGLESv2.dll
MOD - [2016/01/20 17:52:03 | 000,081,528 | ---- | M] () -- C:\Program Files (x86)\Opera\34.0.2036.50\libEGL.dll


========== Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - File not found [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013/05/27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013/04/30 04:52:38 | 000,238,080 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/09/26 02:24:30 | 000,046,592 | ---- | M] (Dassault Systemes) [Auto | Running] -- C:\Program Files\Dassault Systemes\B20\win_b64\code\bin\CATSysDemon.exe -- (BBDemon)
SRV:64bit: - [2009/08/21 09:31:06 | 000,488,800 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:64bit: - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2016/01/20 19:23:52 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2016/01/13 17:28:00 | 000,148,136 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/10/05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/09/11 16:34:16 | 005,702,416 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
SRV - [2013/10/23 07:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2016/02/02 18:56:16 | 000,192,216 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2015/11/12 11:51:00 | 000,034,720 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2015/10/05 09:50:18 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2015/10/05 09:50:10 | 000,109,272 | ---- | M] (Malwarebytes) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)
DRV:64bit: - [2015/10/05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013/11/14 11:45:35 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013/04/30 05:16:04 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2013/04/30 05:16:04 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013/04/30 03:48:14 | 000,359,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013/02/12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2013/02/05 22:06:06 | 000,057,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2012/05/14 07:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/06/10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010/11/20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/01/13 16:37:18 | 007,675,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64)
DRV:64bit: - [2009/09/03 11:14:30 | 000,057,856 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpx64.sys -- (rismxdp)
DRV:64bit: - [2009/09/03 10:59:28 | 000,054,784 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspx64.sys -- (rimsptsk)
DRV:64bit: - [2009/09/03 10:37:02 | 000,067,072 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimmpx64.sys -- (rimmptsk)
DRV:64bit: - [2009/07/14 15:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009/06/10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/04/10 17:09:40 | 000,020,520 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV:64bit: - [2008/08/14 10:40:44 | 000,260,144 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2008/01/02 13:11:50 | 000,024,848 | ---- | M] (IBM) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\LUMDriver.sys -- (LUMDriver)
DRV:64bit: - [2007/07/31 18:04:48 | 000,090,112 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ser2pl64.sys -- (Ser2pl)
DRV:64bit: - [2006/11/19 22:11:06 | 000,008,704 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FwLnk.sys -- (FwLnk)
DRV - [2012/02/07 15:46:12 | 000,023,816 | ---- | M] (CPUID) [Kernel | On_Demand | Stopped] -- D:\PC Wizard 2012\pcwiz_x64.sys -- (cpuz135)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sk-SK
IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 92 6A FC 38 D1 B5 D0 01 [binary data]
IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3421165169-2951040824-594340821-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "SK"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "SK"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:39.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 39.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 39.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/11/15 19:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Extensions
[2015/09/08 21:16:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\d9h2h6hu.default\extensions
[2016/01/13 17:27:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2016/01/13 17:28:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2015/09/26 22:03:00 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3:64bit: - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O4:64bit: - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
O4:64bit: - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui File not found
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files (x86)\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3421165169-2951040824-594340821-1000..\Run: [BitTorrent Sync] "C:\Program Files (x86)\BitTorrent Sync\BTSync.exe" /MINIMIZED File not found
O4 - HKU\S-1-5-21-3421165169-2951040824-594340821-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-3421165169-2951040824-594340821-1000..\Run: [Viber] "C:\Users\Daniel\AppData\Local\Viber\Viber.exe" StartMinimized File not found
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1D58225F-C8F8-45DE-9B25-C576097B4BF1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C6961B18-DEAF-4712-BCB6-84C4BE7C5ED4}: DhcpNameServer = 192.168.42.129
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [1997/07/30 12:31:50 | 000,000,041 | R--- | M] () - G:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{112fd385-4d17-11e3-9876-001e33b6533c}\Shell - "" = AutoRun
O33 - MountPoints2\{112fd385-4d17-11e3-9876-001e33b6533c}\Shell\AutoRun\command - "" = G:\SETUP.EXE -- [1996/11/04 12:04:12 | 000,044,928 | R--- | M] (InstallShield Corporation, Inc.)
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\EsmStart.exe HondaEsm.html
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.iac2 - C:\Windows\SysWOW64\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\Windows\SysWOW64\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv32 - C:\Windows\SysWOW64\ir32_32.dll (Intel(R) Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2016/02/02 20:27:46 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
[2016/02/01 21:27:40 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2016/02/01 21:27:40 | 000,000,000 | ---D | C] -- C:\rsit
[2016/01/25 20:45:03 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\catroot2
[2016/01/25 20:40:45 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2016/01/25 19:26:21 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Windows_7 activator
[2016/01/25 18:59:57 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2016/01/25 18:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2016/01/25 18:59:26 | 000,109,272 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2016/01/25 18:59:26 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2016/01/25 18:59:26 | 000,025,816 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\mbam.sys
[2016/01/25 18:59:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2016/01/25 18:59:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2016/01/13 17:27:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2016/01/08 23:13:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
[2016/01/08 22:47:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2016/01/08 22:44:08 | 000,000,000 | ---D | C] -- C:\GOG Games
[2016/01/08 21:53:34 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\LogMeIn
[2016/01/08 21:53:34 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn
[2016/01/07 17:28:53 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\povodne
[2016/01/07 17:06:15 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\FalloutNV
[2016/01/07 17:06:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tomi2k9 Repacky
[2016/01/07 16:41:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Fallout---New-Vegas-Ultimate-Edition-CZ

========== Files - Modified Within 30 Days ==========

[2016/02/02 20:37:35 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2016/02/02 20:33:00 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2016/02/02 20:29:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
[2016/02/02 20:22:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016/02/02 19:00:06 | 000,740,662 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2016/02/02 19:00:06 | 000,622,724 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2016/02/02 19:00:06 | 000,113,582 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2016/02/02 18:56:16 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2016/02/02 18:55:38 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2016/02/02 18:55:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016/02/02 18:55:23 | 3219,644,416 | -HS- | M] () -- C:\hiberfil.sys
[2016/02/01 21:26:33 | 001,222,144 | ---- | M] () -- C:\Users\Daniel\Desktop\RSITx64.exe
[2016/01/25 20:57:45 | 000,012,624 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016/01/25 20:57:45 | 000,012,624 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016/01/25 19:57:06 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/01/25 19:36:50 | 000,447,750 | RHS- | M] () -- C:\CXQOH
[2016/01/25 18:41:06 | 000,001,127 | ---- | M] () -- C:\Users\Daniel\Desktop\Viber.lnk
[2016/01/20 19:23:52 | 000,796,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2016/01/20 19:23:52 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2016/01/08 23:13:45 | 000,000,736 | ---- | M] () -- C:\Users\Public\Desktop\Worms World Party Remastered.lnk
[2016/01/07 17:06:06 | 000,000,715 | ---- | M] () -- C:\Users\Public\Desktop\Spustit Fallout New Vegas.lnk

========== Files Created - No Company Name ==========

[2016/02/02 20:37:35 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2016/02/01 21:25:32 | 001,222,144 | ---- | C] () -- C:\Users\Daniel\Desktop\RSITx64.exe
[2016/01/25 19:36:50 | 000,447,750 | RHS- | C] () -- C:\CXQOH
[2016/01/25 18:59:29 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/01/08 23:13:45 | 000,000,736 | ---- | C] () -- C:\Users\Public\Desktop\Worms World Party Remastered.lnk
[2016/01/07 17:06:06 | 000,000,715 | ---- | C] () -- C:\Users\Public\Desktop\Spustit Fallout New Vegas.lnk

========== ZeroAccess Check ==========

[2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/11/21 17:26:04 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\BlackBean
[2013/12/08 11:49:57 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Canon
[2015/08/17 16:54:16 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\CHIRP
[2013/11/14 11:49:10 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite
[2013/11/14 12:04:31 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DassaultSystemes
[2014/01/09 22:14:27 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\dll-files.com
[2014/04/17 16:36:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Exec
[2013/11/14 18:47:13 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera
[2013/11/14 10:51:23 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera Software
[2014/03/16 10:56:22 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Subversion
[2015/11/15 20:40:48 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\TeamViewer
[2013/11/14 11:09:49 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\toshiba
[2016/01/08 22:41:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\uTorrent
[2015/09/26 19:25:03 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ViberPC
[2013/11/14 11:04:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\WinBatch
[2014/01/01 13:00:55 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Windows Live Writer

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009/07/14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 06:08:49 | 000,032,572 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013/11/14 11:20:51 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014/04/19 17:16:20 | 000,000,932 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014/04/19 17:16:21 | 000,000,936 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009/07/14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010/11/20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010/11/20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2010/11/20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SysWOW64\explorer.exe
[2010/11/20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009/10/31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\explorer.exe
[2010/11/20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009/08/03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010/11/20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009/07/14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
[2015/04/11 05:31:36 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=43DCEC23557C32F7702C8D5BC729738F -- C:\Windows\SoftwareDistribution.bak\Download\297f31dca24f19f19a16aefa9c58cd10\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_2df8898bfd178df8\services.exe
[2015/04/13 04:28:33 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=71C85477DF9347FE8E7BC55768473FCA -- C:\Windows\SoftwareDistribution.bak\Download\297f31dca24f19f19a16aefa9c58cd10\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_2d7fe646e3ec3705\services.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe

< MD5 for: TCPIP.SYS >
[2014/04/05 03:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SoftwareDistribution.bak\Download\ebb8b24a866efb8ccf046ff6b9882fa1\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2014/04/05 03:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\SoftwareDistribution.bak\Download\ebb8b24a866efb8ccf046ff6b9882fa1\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010/11/20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013/01/04 06:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013/01/03 06:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2009/07/14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013/07/06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2013/07/06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/07/06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014/03/04 12:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\SoftwareDistribution.bak\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 10:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\SoftwareDistribution.bak\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/17 03:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SoftwareDistribution.bak\Download\81b80f6a81d826a058dde28ed40719e5\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/16 04:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\SoftwareDistribution.bak\Download\81b80f6a81d826a058dde28ed40719e5\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2009/10/28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe

< >

< %systemroot%*.* /U /s >
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[9 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\0ca5b3619dffc5c1918c9afa9cff96e8\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\0ca5b3619dffc5c1918c9afa9cff96e8\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\1d46f888e62360c83bde3d90243a6bc1\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\1d46f888e62360c83bde3d90243a6bc1\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution.bak\Download\1f7d95e8c777925dae3a908a46925f32\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\1f7d95e8c777925dae3a908a46925f32\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\223ff330ac46311099ca34306466b16c\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\223ff330ac46311099ca34306466b16c\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\4c7eaf8d18ab9060c2cf8a8581fd1243\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\4c7eaf8d18ab9060c2cf8a8581fd1243\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\5b84f251f3d26790a20f6752b4e8de92\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\5b84f251f3d26790a20f6752b4e8de92\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\780613d2998911e546346428bf5ad758\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\780613d2998911e546346428bf5ad758\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\805cadc8d81b13a940798f8caf978212\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\805cadc8d81b13a940798f8caf978212\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\988bfd7351d35cc69a08af255156c4e1\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\988bfd7351d35cc69a08af255156c4e1\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution.bak\Download\9d77d48f40de460fdd3696f9200b0a61\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\9d77d48f40de460fdd3696f9200b0a61\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\ba3f1e4ec4199fee0f12ca67fb18dedf\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\ba3f1e4ec4199fee0f12ca67fb18dedf\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution.bak\Download\c69d1177dbd5bc22b566744800eddb71\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\c69d1177dbd5bc22b566744800eddb71\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution.bak\Download\edc26da44905a06f22d4329f5f07335c\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\edc26da44905a06f22d4329f5f07335c\*.tmp -> ]
[2 C:\Windows\SoftwareDistribution.bak\Download\fa50330cbf8e2dadd290473740ef8573\*.tmp files -> C:\Windows\SoftwareDistribution.bak\Download\fa50330cbf8e2dadd290473740ef8573\*.tmp -> ]
[21 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
[1 C:\Windows\Temp\{3808A6F1-AAB9-44BE-9517-F88E55F8877A}\*.tmp files -> C:\Windows\Temp\{3808A6F1-AAB9-44BE-9517-F88E55F8877A}\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014/03/31 09:12:20 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ABBYY
[2013/11/18 18:04:07 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Adobe
[2013/11/14 10:48:21 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ATI
[2013/11/21 17:26:04 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\BlackBean
[2013/12/08 11:49:57 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Canon
[2015/08/17 16:54:16 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\CHIRP
[2013/11/14 11:49:10 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite
[2013/11/14 12:04:31 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DassaultSystemes
[2014/01/09 22:14:27 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\dll-files.com
[2014/04/17 16:36:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Exec
[2013/11/14 10:22:55 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Identities
[2013/11/14 11:11:14 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\InstallShield
[2013/11/14 11:21:01 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Macromedia
[2014/03/16 10:53:36 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\MathWorks
[2009/07/14 08:45:14 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Media Center Programs
[2015/12/10 19:28:59 | 000,000,000 | --SD | M] -- C:\Users\Daniel\AppData\Roaming\Microsoft
[2013/11/15 19:52:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Mozilla
[2013/11/14 18:47:13 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera
[2013/11/14 10:51:23 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera Software
[2016/02/02 21:00:24 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Skype
[2014/03/16 10:56:22 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Subversion
[2015/11/15 20:40:48 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\TeamViewer
[2013/11/14 11:09:49 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\toshiba
[2016/01/08 22:41:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\uTorrent
[2015/09/26 19:25:03 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ViberPC
[2015/10/18 19:10:50 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\vlc
[2013/11/14 11:04:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\WinBatch
[2014/01/01 13:00:55 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Windows Live Writer
[2013/11/14 11:03:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2016/01/06 15:55:58 | 002,026,520 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\uTorrent.exe
[2013/11/15 18:42:59 | 001,142,864 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe
[2014/01/30 20:44:45 | 000,905,296 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.3.2_30488.exe
[2014/08/23 21:26:24 | 001,329,744 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.2_32239.exe
[2014/09/14 20:22:00 | 001,414,992 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.2_33870.exe
[2014/10/01 17:55:06 | 001,416,016 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.2_34024.exe
[2014/10/17 18:20:36 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.2_34309.exe
[2014/12/12 19:53:18 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.2_35702.exe
[2015/08/05 18:41:52 | 001,693,024 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.3_40760.exe
[2015/09/07 19:11:26 | 001,696,096 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.4_40911.exe
[2015/09/27 10:51:57 | 001,821,536 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41162.exe
[2015/10/16 18:54:58 | 001,822,048 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41202.exe
[2016/01/06 15:55:58 | 002,026,520 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41372.exe
[2015/09/27 12:00:39 | 000,336,896 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe
[2016/01/06 15:55:45 | 000,336,896 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
[2016/01/08 21:42:00 | 000,336,896 | ---- | M] (BitTorrent Inc.) -- C:\Users\Daniel\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2016/02/02 20:22:00 | 000,000,830 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2016/02/02 18:55:38 | 000,000,932 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2016/02/02 20:33:00 | 000,000,936 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013/10/28 09:29:38 | 003,675,352 | ---- | M] (Disc Soft Ltd)
"BitTorrent Sync" = "C:\Program Files (x86)\BitTorrent Sync\BTSync.exe" /MINIMIZED
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010/11/20 14:25:17 | 001,475,584 | ---- | M] (Microsoft Corporation)
"Viber" = "C:\Users\Daniel\AppData\Local\Viber\Viber.exe" StartMinimized

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2016/01/13 17:28:02 | 000,377,000 | ---- | M] (Mozilla Corporation) MD5=1CE7982AA6A983F4C49A32C8D624237B -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2013/11/21 15:29:05 | 000,757,488 | ---- | M] (Microsoft Corporation) MD5=06085B62BC7E0C8E2605CEA38774D956 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2016/02/02 20:37:35 | 000,000,512 | ---- | M] () MD5=B47954A7B42562199C58D1DDB3E82776 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2013/11/21 15:18:47 | 000,011,257 | ---- | M] () -- \Users\Daniel\AppData\Roaming\uTorrent\Hitman.Absolution.CRACK.ONLY-SKIDROW.torrent
[2002/02/02 02:02:02 | 003,135,490 | ---- | M] () -- \Users\Daniel\Desktop\skola\DP\Minitab.v16.1.1\crack.zip
[2002/02/02 02:02:02 | 003,135,490 | ---- | M] () -- \Users\Daniel\Desktop\skola\DP\Minitab.v16.1.1\Minitab.v16.1.1\crack.zip

< *keygen* /s >

< *loader* /s >
[2003/09/15 15:02:00 | 000,169,384 | ---- | M] () -- \Counter-Strike 1.6\cstrike\models\qloader.mdl
[2003/09/15 14:55:50 | 000,352,548 | ---- | M] () -- \Counter-Strike 1.6\valve\models\loader.mdl
[2003/09/15 14:56:04 | 000,012,764 | ---- | M] () -- \Counter-Strike 1.6\valve\sound\ambience\loader_hydra1.wav
[2003/09/15 14:56:04 | 000,012,164 | ---- | M] () -- \Counter-Strike 1.6\valve\sound\ambience\loader_step1.wav
[2006/10/26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2014/05/03 18:56:08 | 000,008,192 | ---- | M] () -- \Program Files (x86)\CHIRP\_win32sysloader.pyd
[2015/06/23 02:28:54 | 000,000,577 | ---- | M] () -- \Program Files (x86)\CHIRP\lib\gdk-pixbuf-2.0\2.10.0\loaders.cache
[2012/02/09 07:51:30 | 000,025,609 | ---- | M] () -- \Program Files (x86)\CHIRP\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-svg.dll
[2012/02/09 07:50:52 | 000,002,567 | ---- | M] () -- \Program Files (x86)\CHIRP\share\man\man1\gdk-pixbuf-query-loaders.1
[2011/10/08 01:34:22 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderLargeBlue.gif
[2011/10/08 01:34:22 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderLargeGrey.gif
[2011/10/08 01:34:22 | 000,001,737 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderSmallBlue.gif
[2011/10/08 01:34:22 | 000,001,737 | ---- | M] () -- \Program Files (x86)\Rockstar Games\Social Club\UI\images\loaderSmallGold.gif
[2009/10/17 11:13:12 | 000,025,920 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\code\clr\V5JsyClrLoader.dll
[2009/07/11 01:49:02 | 000,002,520 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\CATJsyClassLoader.jar
[2009/07/11 01:49:58 | 000,006,795 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\CATJWSIWASLoader.jar
[2009/09/29 11:35:40 | 000,002,045 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_de.properties
[2004/01/23 17:29:00 | 000,001,684 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_en.properties
[2009/09/29 11:30:18 | 000,002,362 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_fr.properties
[2009/09/29 11:42:02 | 000,004,216 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_ja.properties
[2009/09/29 12:12:36 | 000,003,795 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_ko.properties
[2009/09/29 12:07:24 | 000,002,550 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\ClassLoader_zh.properties
[2009/07/11 01:48:58 | 000,005,919 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\java\V5JsyLoader.jar
[2009/07/11 01:49:02 | 000,002,520 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\javaserver\CATJsyClassLoader.jar
[2009/07/11 01:49:58 | 000,006,795 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\javaserver\CATJWSIWASLoader.jar
[2009/07/11 01:48:58 | 000,005,919 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\docs\javaserver\V5JsyLoader.jar
[2006/04/12 16:07:12 | 000,001,702 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATFMSaveLoadError.CATNls
[1999/11/26 14:59:46 | 000,000,147 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATMdlEdtSaveLoadError.CATNls
[2005/05/18 18:56:50 | 000,000,584 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATMMSaveLoadError.CATNls
[1999/04/29 17:31:30 | 000,000,066 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATOMCATSDMSaveLoadError.CATNls
[2008/05/20 18:33:14 | 000,001,275 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATOMLoadError.CATNls
[2005/04/19 09:33:58 | 000,003,533 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATOMSaveLoadError.CATNls
[2008/07/10 19:11:24 | 000,004,981 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATOsmSaveLoadError.CATNls
[2003/06/27 10:47:46 | 000,000,621 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATSmBOMSaveLoadError.CATNls
[2005/02/22 17:44:36 | 000,000,098 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATStandardSaveLoadError.CATNls
[2007/09/06 17:48:08 | 000,000,464 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\CATStkParamLoaderCmd.CATNls
[2009/08/05 13:49:14 | 000,001,581 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\OMCATSaveLoadError.CATNls
[2009/09/01 11:14:08 | 000,002,084 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATFMSaveLoadError.CATNls
[2009/09/01 11:16:14 | 000,000,161 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATMdlEdtSaveLoadError.CATNls
[2009/09/01 11:17:28 | 000,000,680 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATMMSaveLoadError.CATNls
[2009/09/01 11:18:00 | 000,000,108 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATOMCATSDMSaveLoadError.CATNls
[2009/09/01 11:18:02 | 000,001,467 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATOMLoadError.CATNls
[2009/09/01 11:18:02 | 000,004,261 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATOMSaveLoadError.CATNls
[2009/09/01 11:18:04 | 000,006,264 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATOsmSaveLoadError.CATNls
[2009/09/01 11:20:40 | 000,000,798 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATSmBOMSaveLoadError.CATNls
[2009/09/01 11:21:24 | 000,000,118 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\CATStandardSaveLoadError.CATNls
[2009/10/23 17:06:18 | 000,001,909 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\French\OMCATSaveLoadError.CATNls
[2009/08/31 16:06:04 | 000,002,065 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATFMSaveLoadError.CATNls
[2009/08/31 16:07:10 | 000,000,149 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATMdlEdtSaveLoadError.CATNls
[2009/08/31 16:07:56 | 000,000,712 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATMMSaveLoadError.CATNls
[2009/08/31 16:08:16 | 000,000,088 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATOMCATSDMSaveLoadError.CATNls
[2009/08/31 16:08:16 | 000,001,439 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATOMLoadError.CATNls
[2009/08/31 16:08:16 | 000,004,380 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATOMSaveLoadError.CATNls
[2009/08/31 16:08:18 | 000,006,160 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATOsmSaveLoadError.CATNls
[2009/08/31 16:09:48 | 000,000,839 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATSmBOMSaveLoadError.CATNls
[2009/08/31 16:10:18 | 000,000,110 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\CATStandardSaveLoadError.CATNls
[2009/10/23 16:58:58 | 000,001,860 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\German\OMCATSaveLoadError.CATNls
[2009/09/04 11:58:00 | 000,001,966 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATFMSaveLoadError.CATNls
[2009/09/04 11:58:44 | 000,000,161 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATMdlEdtSaveLoadError.CATNls
[2009/09/04 11:59:14 | 000,000,670 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATMMSaveLoadError.CATNls
[2009/09/04 11:59:28 | 000,000,089 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATOMCATSDMSaveLoadError.CATNls
[2009/09/04 11:59:28 | 000,001,370 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATOMLoadError.CATNls
[2009/09/04 11:59:28 | 000,004,167 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATOMSaveLoadError.CATNls
[2009/09/04 11:59:30 | 000,006,121 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATOsmSaveLoadError.CATNls
[2009/09/04 12:00:32 | 000,000,743 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATSmBOMSaveLoadError.CATNls
[2009/09/04 12:00:54 | 000,000,117 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\CATStandardSaveLoadError.CATNls
[2009/10/16 16:29:08 | 000,001,934 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Italian\OMCATSaveLoadError.CATNls
[2009/08/28 16:40:30 | 000,001,774 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATFMSaveLoadError.CATNls
[2009/08/28 16:41:16 | 000,000,128 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATMdlEdtSaveLoadError.CATNls
[2009/08/28 16:41:22 | 000,000,593 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATMMSaveLoadError.CATNls
[2009/08/28 16:41:28 | 000,000,072 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATOMCATSDMSaveLoadError.CATNls
[2009/08/28 16:41:28 | 000,001,197 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATOMLoadError.CATNls
[2009/08/28 16:41:28 | 000,003,437 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATOMSaveLoadError.CATNls
[2009/08/28 16:41:30 | 000,004,842 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATOsmSaveLoadError.CATNls
[2009/08/28 16:41:54 | 000,000,702 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATSmBOMSaveLoadError.CATNls
[2009/08/28 16:41:58 | 000,000,087 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\CATStandardSaveLoadError.CATNls
[2009/10/21 15:01:52 | 000,001,495 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Japanese\OMCATSaveLoadError.CATNls
[2009/08/28 14:14:00 | 000,001,639 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATFMSaveLoadError.CATNls
[2009/08/28 14:15:30 | 000,000,129 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATMdlEdtSaveLoadError.CATNls
[2009/08/28 14:15:44 | 000,000,588 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATMMSaveLoadError.CATNls
[2009/08/28 14:16:00 | 000,000,074 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATOMCATSDMSaveLoadError.CATNls
[2009/08/28 14:16:00 | 000,001,245 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATOMLoadError.CATNls
[2009/08/28 14:16:00 | 000,003,466 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATOMSaveLoadError.CATNls
[2009/08/28 14:16:02 | 000,004,993 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATOsmSaveLoadError.CATNls
[2009/08/28 14:17:42 | 000,000,663 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATSmBOMSaveLoadError.CATNls
[2009/08/28 14:17:50 | 000,000,092 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\CATStandardSaveLoadError.CATNls
[2009/08/28 14:20:32 | 000,001,539 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Korean\OMCATSaveLoadError.CATNls
[2009/08/31 16:56:34 | 000,001,845 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATFMSaveLoadError.CATNls
[2009/08/31 16:57:38 | 000,000,145 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATMdlEdtSaveLoadError.CATNls
[2009/08/31 16:57:48 | 000,000,695 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATMMSaveLoadError.CATNls
[2009/08/31 16:58:02 | 000,000,074 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATOMCATSDMSaveLoadError.CATNls
[2009/08/31 16:58:02 | 000,001,357 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATOMLoadError.CATNls
[2009/08/31 16:58:02 | 000,003,753 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATOMSaveLoadError.CATNls
[2009/08/31 16:58:04 | 000,005,318 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATOsmSaveLoadError.CATNls
[2009/08/31 16:59:32 | 000,000,726 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATSmBOMSaveLoadError.CATNls
[2009/08/31 16:59:36 | 000,000,099 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\CATStandardSaveLoadError.CATNls
[2009/10/13 11:12:38 | 000,001,623 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Russian\OMCATSaveLoadError.CATNls
[2009/09/30 17:31:10 | 000,001,195 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATFMSaveLoadError.CATNls
[2009/09/30 17:31:36 | 000,000,099 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATMdlEdtSaveLoadError.CATNls
[2009/09/30 17:31:40 | 000,000,401 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATMMSaveLoadError.CATNls
[2009/09/30 17:33:00 | 000,000,053 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATOMCATSDMSaveLoadError.CATNls
[2009/09/30 17:33:00 | 000,000,958 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATOMLoadError.CATNls
[2009/09/30 17:33:00 | 000,002,562 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATOMSaveLoadError.CATNls
[2009/09/30 17:33:02 | 000,003,980 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATOsmSaveLoadError.CATNls
[2009/09/30 17:33:32 | 000,000,503 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATSmBOMSaveLoadError.CATNls
[2009/09/30 17:33:34 | 000,000,063 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\CATStandardSaveLoadError.CATNls
[2009/10/12 13:43:40 | 000,001,128 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\msgcatalog\Simplified_Chinese\OMCATSaveLoadError.CATNls
[2005/11/24 14:34:26 | 000,000,176 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\servlet\SessionDownloader.XMLServlet
[2005/06/09 16:05:40 | 000,000,126 | ---- | M] () -- \Program Files\Dassault Systemes\B20\win_b64\resources\widget\FileUploader.XMLWidget
[2013/08/22 19:01:26 | 000,061,528 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2014/08/16 18:28:48 | 000,018,544 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader-0ee9685baf8ff395a7119d551063e2d4.min[1].js
[2014/11/14 20:34:38 | 000,019,075 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader-1e2a66f59d6cdbb4b88978ac4dfd3746.min[1].js
[2016/02/01 21:21:50 | 000,021,077 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader-v2-cdd2c3c9f29fd39d19493ab8311bc22f.min[1].js
[2016/01/08 22:45:40 | 000,021,003 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader-v2-eb71b98961a9b89ba51601bf601ccc67.min[1].js
[2016/01/08 22:45:40 | 000,002,068 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader-v2[1].htm
[2014/11/14 20:34:38 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FRK3VQC\AdLoader[1].htm
[2014/09/13 20:07:16 | 000,018,715 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4024LNPA\AdLoader-a5fa12058ddb9a8919d6906ba95d7c57.min[1].js
[2016/02/01 21:21:50 | 000,002,068 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4024LNPA\AdLoader-v2[1].htm
[2014/07/29 19:56:04 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4024LNPA\AdLoader[1].htm
[2014/12/24 21:43:42 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4024LNPA\AdLoader[2].htm
[2014/03/13 22:38:47 | 000,000,723 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HU90SICV\downloaderror[1].js
[2014/03/13 22:38:47 | 000,001,174 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HU90SICV\downloader[1].js
[2014/03/21 19:25:06 | 000,112,122 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I52CP2FH\AdLoader-7b473315d0084c71df83cdee72aab144.min[1].js
[2013/11/21 15:15:38 | 000,015,748 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I52CP2FH\loader[1].js
[2013/12/21 22:49:53 | 000,110,991 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDDCN530\AdLoader-7b857a7be889bd57f92da60a9b6146bb.min[1].js
[2014/02/20 20:47:58 | 000,001,870 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDDCN530\AdLoader[1].htm
[2014/05/29 19:12:31 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDDCN530\AdLoader[3].htm
[2013/11/14 10:42:34 | 000,791,552 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDDCN530\amddriverdownloader[1].exe
[2013/11/14 11:20:01 | 000,001,174 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDDCN530\downloader[1].js
[2014/07/29 19:56:04 | 000,017,912 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WC364S9R\AdLoader-3b8e790904fffcf74f96367cd382e261.min[1].js
[2014/09/13 20:07:16 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WC364S9R\AdLoader[1].htm
[2014/12/24 21:43:43 | 000,019,121 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XXZE8ADH\AdLoader-288a31a04e1398b1a794975bf93ce9a4.min[1].js
[2015/03/22 18:33:14 | 000,001,980 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XXZE8ADH\AdLoader[1].htm
[2013/11/14 10:42:41 | 000,791,552 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\70KSKBHH\amddriverdownloader[1].exe
[2014/12/28 12:59:34 | 000,000,673 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\70KSKBHH\loader.white[1].gif
[2013/11/14 10:41:49 | 000,015,748 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\70KSKBHH\loader[1].js
[2013/11/14 10:32:52 | 000,003,061 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\70KSKBHH\rmsloaderdelayeddiv[1].js
[2013/12/12 21:56:07 | 000,000,673 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CCOVJ511\loader.white[1].gif
[2014/12/28 13:00:33 | 000,000,673 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EM4XIQAV\loader.white[1].gif
[2014/11/14 22:28:18 | 000,008,466 | ---- | M] () -- \Users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SLGKEEVU\ajax-loader[1].gif
[2014/07/01 10:46:16 | 000,072,638 | ---- | M] () -- \Users\Daniel\AppData\Local\Skype\Apps\login\images\loader.gif
[2014/07/01 10:46:16 | 000,003,032 | ---- | M] () -- \Users\Daniel\AppData\Local\Skype\Apps\login\images\loader.png
[2014/07/01 10:46:16 | 000,006,012 | ---- | M] () -- \Users\Daniel\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif
[2014/07/01 10:46:16 | 000,021,956 | ---- | M] () -- \Users\Daniel\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif
[2014/07/01 10:46:16 | 000,009,772 | ---- | M] () -- \Users\Daniel\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png
[2015/12/28 23:16:11 | 001,878,664 | ---- | M] () -- \Users\Daniel\AppData\Local\Temp\Rar$EXa0.940\Windows_7 activator\Windows 7 Loader.exe
[2016/01/25 20:02:18 | 000,000,830 | ---- | M] () -- \Users\Daniel\AppData\Roaming\Microsoft\Windows\Recent\Windows 7 Loader.lnk
[2016/01/05 12:34:06 | 000,003,208 | ---- | M] () -- \Users\Daniel\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp\1.10_0\skin\ajax-loader.gif
[2015/12/28 23:16:11 | 001,878,664 | ---- | M] () -- \Users\Daniel\Desktop\Windows_7 activator\Windows 7 Loader.exe
[2003/09/15 13:02:00 | 000,169,384 | ---- | M] () -- \Valve\cstrike\models\qloader.mdl
[2003/09/15 12:55:50 | 000,352,548 | ---- | M] () -- \Valve\valve\models\loader.mdl
[2003/09/15 12:56:04 | 000,012,764 | ---- | M] () -- \Valve\valve\sound\ambience\loader_hydra1.wav
[2003/09/15 12:56:04 | 000,012,164 | ---- | M] () -- \Valve\valve\sound\ambience\loader_step1.wav
[2013/11/14 11:58:25 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2015/07/15 21:47:39 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_91de3a922cd5502f.manifest
[2015/07/15 21:45:08 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_da-dk_2f181ab9231b4c2e.manifest
[2015/07/15 21:42:58 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_de-de_2c43aff524f1a0c8.manifest
[2015/07/15 21:43:25 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_el-gr_d4d9dd8814070956.manifest
[2015/07/15 21:44:15 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_es-es_d4ffe2d213f69e32.manifest
[2015/07/15 21:44:59 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fi-fi_741ae77f0910905c.manifest
[2015/07/15 21:43:03 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fr-fr_77b758d106c8b494.manifest
[2015/07/15 21:47:44 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_hu-hu_bf27d918eb2883b0.manifest
[2015/07/15 21:47:43 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_it-it_61df4f17ddfa9a12.manifest
[2015/07/15 21:47:10 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ja-jp_0404ce24d115abed.manifest
[2015/07/15 21:47:06 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ko-kr_a76eaad9c3867303.manifest
[2015/07/15 21:45:43 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nb-no_90012c0e9bab9ebf.manifest
[2015/07/15 21:47:58 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nl-nl_8e40774c9cd7a894.manifest
[2015/07/15 21:47:42 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pl-pl_d47cd1ce81fa1648.manifest
[2015/07/15 21:46:48 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-br_d6d0bc728083aa2c.manifest
[2015/07/15 21:47:14 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-pt_d7b28bde7ff31a08.manifest
[2015/07/15 21:44:03 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ru-ru_1e559da264d4a834.manifest
[2015/07/15 21:47:35 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_sv-se_ba5088175bfdb28f.manifest
[2015/07/15 21:46:55 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_tr-tr_635dd25e4ab9b480.manifest
[2015/07/15 21:45:20 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-cn_34baf05bfaf1869f.manifest
[2015/07/15 21:42:26 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-hk_3365e8e9fbccf92f.manifest
[2015/07/15 21:46:56 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-tw_38b72db1f862630f.manifest
[2015/07/15 21:46:46 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_9fd1117e67f2058b.manifest
[2015/07/15 21:45:08 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_da-dk_3d0af1a55e38018a.manifest
[2015/07/15 21:42:34 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_de-de_3a3686e1600e5624.manifest
[2015/07/15 21:43:24 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_el-gr_e2ccb4744f23beb2.manifest
[2015/07/15 19:14:39 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_e3275cda4eec61e9.manifest
[2015/07/15 21:43:45 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_es-es_e2f2b9be4f13538e.manifest
[2015/07/15 21:44:59 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fi-fi_820dbe6b442d45b8.manifest
[2015/07/15 21:42:33 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_fr-fr_85aa2fbd41e569f0.manifest
[2015/07/15 21:46:53 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_hu-hu_cd1ab0052645390c.manifest
[2015/07/15 21:46:36 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_it-it_6fd2260419174f6e.manifest
[2015/07/15 21:46:42 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ja-jp_11f7a5110c326149.manifest
[2015/07/15 21:46:38 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ko-kr_b56181c5fea3285f.manifest
[2015/07/15 21:45:42 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nb-no_9df402fad6c8541b.manifest
[2015/07/15 21:47:00 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_nl-nl_9c334e38d7f45df0.manifest
[2015/07/15 21:46:50 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pl-pl_e26fa8babd16cba4.manifest
[2015/07/15 21:46:22 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-br_e4c3935ebba05f88.manifest
[2015/07/15 21:46:17 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_pt-pt_e5a562cabb0fcf64.manifest
[2015/07/15 21:43:33 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_ru-ru_2c48748e9ff15d90.manifest
[2015/07/15 21:46:41 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_sv-se_c8435f03971a67eb.manifest
[2015/07/15 21:45:58 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_tr-tr_7150a94a85d669dc.manifest
[2015/07/15 21:44:59 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-cn_42adc748360e3bfb.manifest
[2015/07/15 21:42:26 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-hk_4158bfd636e9ae8b.manifest
[2015/07/15 21:46:30 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_zh-tw_46aa049e337f186b.manifest
[2015/07/15 19:39:51 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_9e8a5aca9a63138e.manifest
[2015/07/15 19:00:47 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18933_none_68c146139280aa45\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/07/15 19:05:03 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23136_none_694dbbdeab9bc956\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/07/15 18:44:18 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18933_none_0ca2aa8fda23390f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/07/15 18:40:57 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\1b6515f4e265b246e8978759ec8d06b6\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23136_none_0d2f205af33e5820\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/01/12 23:17:25 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_91e42f042cd18522.manifest
[2015/01/12 23:17:33 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_da-dk_2f1e0f2b23178121.manifest
[2015/01/12 23:17:15 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_de-de_2c49a46724edd5bb.manifest
[2015/01/12 23:17:29 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_el-gr_d4dfd1fa14033e49.manifest
[2015/01/12 23:17:20 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_es-es_d505d74413f2d325.manifest
[2015/01/12 23:17:21 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_fi-fi_7420dbf1090cc54f.manifest
[2015/01/12 23:17:29 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_fr-fr_77bd4d4306c4e987.manifest
[2015/01/12 23:17:19 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_hu-hu_bf2dcd8aeb24b8a3.manifest
[2015/01/12 23:17:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_it-it_61e54389ddf6cf05.manifest
[2015/01/12 23:17:30 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ja-jp_040ac296d111e0e0.manifest
[2015/01/12 23:17:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ko-kr_a7749f4bc382a7f6.manifest
[2015/01/12 23:17:22 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_nb-no_900720809ba7d3b2.manifest
[2015/01/12 23:17:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_nl-nl_8e466bbe9cd3dd87.manifest
[2015/01/12 23:17:15 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pl-pl_d482c64081f64b3b.manifest
[2015/01/12 23:17:17 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pt-br_d6d6b0e4807fdf1f.manifest
[2015/01/12 23:17:22 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pt-pt_d7b880507fef4efb.manifest
[2015/01/12 23:17:13 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ru-ru_1e5b921464d0dd27.manifest
[2015/01/12 23:17:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_sv-se_ba567c895bf9e782.manifest
[2015/01/12 23:17:21 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_tr-tr_6363c6d04ab5e973.manifest
[2015/01/12 23:17:32 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-cn_34c0e4cdfaedbb92.manifest
[2015/01/12 23:17:30 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-hk_336bdd5bfbc92e22.manifest
[2015/01/12 23:17:21 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-tw_38bd2223f85e9802.manifest
[2015/01/12 23:17:32 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_9fd705f067ee3a7e.manifest
[2015/01/12 23:17:32 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_da-dk_3d10e6175e34367d.manifest
[2015/01/12 23:17:23 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_de-de_3a3c7b53600a8b17.manifest
[2015/01/12 23:17:26 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_el-gr_e2d2a8e64f1ff3a5.manifest
[2015/01/12 23:17:22 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_en-us_e32d514c4ee896dc.manifest
[2015/01/12 23:17:33 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_es-es_e2f8ae304f0f8881.manifest
[2015/01/12 23:17:32 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_fi-fi_8213b2dd44297aab.manifest
[2015/01/12 23:17:09 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_fr-fr_85b0242f41e19ee3.manifest
[2015/01/12 23:17:22 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_hu-hu_cd20a47726416dff.manifest
[2015/01/12 23:17:14 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_it-it_6fd81a7619138461.manifest
[2015/01/12 23:17:11 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ja-jp_11fd99830c2e963c.manifest
[2015/01/12 23:17:19 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ko-kr_b5677637fe9f5d52.manifest
[2015/01/12 23:17:30 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_nb-no_9df9f76cd6c4890e.manifest
[2015/01/12 23:17:28 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_nl-nl_9c3942aad7f092e3.manifest
[2015/01/12 23:17:18 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pl-pl_e2759d2cbd130097.manifest
[2015/01/12 23:17:24 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pt-br_e4c987d0bb9c947b.manifest
[2015/01/12 23:17:11 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_pt-pt_e5ab573cbb0c0457.manifest
[2015/01/12 23:17:21 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_ru-ru_2c4e69009fed9283.manifest
[2015/01/12 23:17:20 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_sv-se_c849537597169cde.manifest
[2015/01/12 23:17:29 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_tr-tr_71569dbc85d29ecf.manifest
[2015/01/12 23:17:16 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-cn_42b3bbba360a70ee.manifest
[2015/01/12 23:17:18 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-hk_415eb44836e5e37e.manifest
[2015/01/12 23:17:14 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_zh-tw_46aff910337b4d5e.manifest
[2015/01/12 04:50:57 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_9e904f3c9a5f4881.manifest
[2 \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\*.tmp files -> \Windows\SoftwareDistribution.bak\Download\2a2a1d154ad261eeae596330c5989dc5\*.tmp -> ]
[2015/05/25 21:04:06 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_cs-cz_91aef7d42cf95d70.manifest
[2015/05/25 21:02:40 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_da-dk_2ee8d7fb233f596f.manifest
[2015/05/25 20:55:38 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_de-de_2c146d372515ae09.manifest
[2015/05/25 21:00:30 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_el-gr_d4aa9aca142b1697.manifest
[2015/05/25 21:01:40 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_es-es_d4d0a014141aab73.manifest
[2015/05/25 21:00:12 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_fi-fi_73eba4c109349d9d.manifest
[2015/05/25 20:57:09 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_fr-fr_7788161306ecc1d5.manifest
[2015/05/25 21:04:01 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_hu-hu_bef8965aeb4c90f1.manifest
[2015/05/25 21:03:14 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_it-it_61b00c59de1ea753.manifest
[2015/05/25 20:59:06 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ja-jp_03d58b66d139b92e.manifest
[2015/05/25 20:57:42 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ko-kr_a73f681bc3aa8044.manifest
[2015/05/25 21:03:03 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_nb-no_8fd1e9509bcfac00.manifest
[2015/05/25 21:04:39 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_nl-nl_8e11348e9cfbb5d5.manifest
[2015/05/25 21:03:16 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pl-pl_d44d8f10821e2389.manifest
[2015/05/25 21:03:55 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pt-br_d6a179b480a7b76d.manifest
[2015/05/25 21:03:24 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pt-pt_d783492080172749.manifest
[2015/05/25 21:04:25 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ru-ru_1e265ae464f8b575.manifest
[2015/05/25 21:04:07 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_sv-se_ba2145595c21bfd0.manifest
[2015/05/25 21:04:18 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_tr-tr_632e8fa04addc1c1.manifest
[2015/05/25 20:58:57 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-cn_348bad9dfb1593e0.manifest
[2015/05/25 20:51:49 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-hk_3336a62bfbf10670.manifest
[2015/05/25 20:58:36 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-tw_3887eaf3f8867050.manifest
[2015/05/25 21:02:49 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_cs-cz_9fa1cec0681612cc.manifest
[2015/05/25 21:02:38 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_da-dk_3cdbaee75e5c0ecb.manifest
[2015/05/25 20:55:02 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_de-de_3a07442360326365.manifest
[2015/05/25 21:00:29 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_el-gr_e29d71b64f47cbf3.manifest
[2015/05/25 19:25:03 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_en-us_e2f81a1c4f106f2a.manifest
[2015/05/25 21:00:55 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_es-es_e2c377004f3760cf.manifest
[2015/05/25 21:00:10 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_fi-fi_81de7bad445152f9.manifest
[2015/05/25 20:56:43 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_fr-fr_857aecff42097731.manifest
[2015/05/25 21:02:44 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_hu-hu_cceb6d472669464d.manifest
[2015/05/25 21:01:52 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_it-it_6fa2e346193b5caf.manifest
[2015/05/25 20:58:36 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ja-jp_11c862530c566e8a.manifest
[2015/05/25 20:57:20 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ko-kr_b5323f07fec735a0.manifest
[2015/05/25 21:03:00 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_nb-no_9dc4c03cd6ec615c.manifest
[2015/05/25 21:03:03 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_nl-nl_9c040b7ad8186b31.manifest
[2015/05/25 21:02:03 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pl-pl_e24065fcbd3ad8e5.manifest
[2015/05/25 21:02:33 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pt-br_e49450a0bbc46cc9.manifest
[2015/05/25 21:02:05 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_pt-pt_e576200cbb33dca5.manifest
[2015/05/25 21:02:52 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_ru-ru_2c1931d0a0156ad1.manifest
[2015/05/25 21:02:49 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_sv-se_c8141c45973e752c.manifest
[2015/05/25 21:02:58 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_tr-tr_7121668c85fa771d.manifest
[2015/05/25 20:58:29 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-cn_427e848a3632493c.manifest
[2015/05/25 20:51:48 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-hk_41297d18370dbbcc.manifest
[2015/05/25 20:58:18 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_zh-tw_467ac1e033a325ac.manifest
[2015/05/25 19:45:52 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.23072_none_9e5b180c9a8720cf.manifest
[2015/05/25 19:11:40 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18869_none_68a6d625929398fb\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/25 19:14:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23072_none_691e7920abbfd697\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/25 18:55:18 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18869_none_0c883aa1da3627c5\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/25 19:00:35 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\5b94cfccf8026155b37fdc15c738f964\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23072_none_0cffdd9cf3626561\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/01/16 07:36:46 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_91e62f982ccfb7d0.manifest
[2015/01/16 07:38:08 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_da-dk_2f200fbf2315b3cf.manifest
[2015/01/16 07:36:28 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_de-de_2c4ba4fb24ec0869.manifest
[2015/01/16 07:37:21 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_el-gr_d4e1d28e140170f7.manifest
[2015/01/16 07:36:33 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_en-us_d53c7af413ca142e.manifest
[2015/01/16 07:36:36 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_es-es_d507d7d813f105d3.manifest
[2015/01/16 07:37:57 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_fi-fi_7422dc85090af7fd.manifest
[2015/01/16 07:36:37 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_fr-fr_77bf4dd706c31c35.manifest
[2015/01/16 07:37:32 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_hu-hu_bf2fce1eeb22eb51.manifest
[2015/01/16 07:37:56 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_it-it_61e7441dddf501b3.manifest
[2015/01/16 07:37:56 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ja-jp_040cc32ad110138e.manifest
[2015/01/16 07:37:57 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ko-kr_a7769fdfc380daa4.manifest
[2015/01/16 07:37:27 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_nb-no_900921149ba60660.manifest
[2015/01/16 07:37:58 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_nl-nl_8e486c529cd21035.manifest
[2015/01/16 07:37:25 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pl-pl_d484c6d481f47de9.manifest
[2015/01/16 07:36:43 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pt-br_d6d8b178807e11cd.manifest
[2015/01/16 07:38:08 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pt-pt_d7ba80e47fed81a9.manifest
[2015/01/16 07:36:30 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ru-ru_1e5d92a864cf0fd5.manifest
[2015/01/16 07:37:11 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_sv-se_ba587d1d5bf81a30.manifest
[2015/01/16 07:37:46 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_tr-tr_6365c7644ab41c21.manifest
[2015/01/16 07:38:08 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-cn_34c2e561faebee40.manifest
[2015/01/16 07:38:02 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-hk_336dddeffbc760d0.manifest
[2015/01/16 07:36:42 | 000,004,141 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-tw_38bf22b7f85ccab0.manifest
[2015/01/16 07:37:02 | 000,005,511 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03.manifest
[2015/01/16 07:37:26 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_9fd9068467ec6d2c.manifest
[2015/01/16 07:36:33 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_da-dk_3d12e6ab5e32692b.manifest
[2015/01/16 07:37:03 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_de-de_3a3e7be76008bdc5.manifest
[2015/01/16 07:36:54 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_el-gr_e2d4a97a4f1e2653.manifest
[2015/01/16 07:37:53 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_en-us_e32f51e04ee6c98a.manifest
[2015/01/16 07:36:44 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_es-es_e2faaec44f0dbb2f.manifest
[2015/01/16 07:37:16 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_fi-fi_8215b3714427ad59.manifest
[2015/01/16 07:36:54 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_fr-fr_85b224c341dfd191.manifest
[2015/01/16 07:36:46 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_hu-hu_cd22a50b263fa0ad.manifest
[2015/01/16 07:36:34 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_it-it_6fda1b0a1911b70f.manifest
[2015/01/16 07:38:08 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ja-jp_11ff9a170c2cc8ea.manifest
[2015/01/16 07:37:14 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ko-kr_b56976cbfe9d9000.manifest
[2015/01/16 07:37:15 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_nb-no_9dfbf800d6c2bbbc.manifest
[2015/01/16 07:37:50 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_nl-nl_9c3b433ed7eec591.manifest
[2015/01/16 07:38:03 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pl-pl_e2779dc0bd113345.manifest
[2015/01/16 07:36:41 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pt-br_e4cb8864bb9ac729.manifest
[2015/01/16 07:36:56 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_pt-pt_e5ad57d0bb0a3705.manifest
[2015/01/16 07:36:35 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_ru-ru_2c5069949febc531.manifest
[2015/01/16 07:37:15 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_sv-se_c84b54099714cf8c.manifest
[2015/01/16 07:36:36 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_tr-tr_71589e5085d0d17d.manifest
[2015/01/16 07:36:41 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-cn_42b5bc4e3608a39c.manifest
[2015/01/16 07:37:13 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-hk_4160b4dc36e4162c.manifest
[2015/01/16 07:37:05 | 000,004,144 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_zh-tw_46b1f9a43379800c.manifest
[2015/01/16 07:36:46 | 000,005,560 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\680abf31f54d1d44537ad659fbd3fdef\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_9e924fd09a5d7b2f.manifest
[2013/08/29 03:18:31 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\b5eb64a2a2d59058733468e222ed35e9\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/29 02:54:48 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\b5eb64a2a2d59058733468e222ed35e9\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/04/12 03:28:21 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/04/12 03:03:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution.bak\Download\f6446aa2f5f86c06820f4e4200db84ac\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013/08/02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 15:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 03:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 07:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 06:37:37 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009/07/14 06:37:37 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2009/07/14 06:37:37 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2009/07/14 06:37:37 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2009/07/14 06:37:37 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2013/11/22 21:13:47 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013/11/22 21:13:47 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013/11/22 21:13:47 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013/11/22 21:13:47 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013/11/22 21:13:47 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009/07/14 03:44:20 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2015/01/12 23:17:17 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_en-us_d53a7a6013cbe180.manifest
[2015/01/16 07:36:33 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_en-us_d53c7af413ca142e.manifest
[2015/05/25 19:25:12 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_en-us_d505433013f3b9ce.manifest
[2015/07/15 19:15:00 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_en-us_d53485ee13cfac8d.manifest
[2009/07/14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011/02/05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011/02/05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010/11/20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2015/01/12 04:50:53 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55.manifest
[2015/01/16 07:37:02 | 000,005,511 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03.manifest
[2015/05/25 19:45:47 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23072_none_b993435c9c96c3a3.manifest
[2015/07/15 19:39:45 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_b9c2861a9c72b662.manifest
[2009/07/14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 05:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 05:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 06:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

OTL Extras logfile created on: 2. 2. 2016 20:33:39 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Daniel\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 50,71% Memory free
7,99 Gb Paging File | 5,58 Gb Available in Paging File | 69,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,89 Gb Total Space | 39,50 Gb Free Space | 26,53% Space Free | Partition Type: NTFS
Drive D: | 147,73 Gb Total Space | 65,17 Gb Free Space | 44,11% Space Free | Partition Type: NTFS
Drive G: | 3,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)

[HKEY_USERS\S-1-5-21-3421165169-2951040824-594340821-1000\SOFTWARE\Classes\<extension>]
.html [@ = OperaStable] -- C:\Program Files (x86)\Opera\Launcher.exe (Opera Software)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01CC740D-6184-427B-880C-B5EF4F1CE9B6}" = lport=137 | protocol=17 | dir=in | app=system |
"{08D93469-7BD7-451A-ADD8-0C3A28EDA18A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{10BA2312-2A6C-4E2C-ACE0-4908FBC055D6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{1459DE48-C740-4CB9-839C-3F2C6D18EF10}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1D62D3E8-CDE4-4DD4-8B1B-11B91DCD58BE}" = lport=138 | protocol=17 | dir=in | app=system |
"{29E7F99A-66C5-4154-A5F4-F01F9C956240}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=%systemroot%\microsoft.net\framework64\v3.0\windows communication foundation\smsvchost.exe |
"{2E9EF9CD-4364-4EA3-98AA-438C6FC74E7C}" = rport=137 | protocol=17 | dir=out | app=system |
"{3C988346-5F2B-4F66-BF41-91982D0BF993}" = lport=2869 | protocol=6 | dir=in | app=system |
"{45E934B4-F231-4876-8878-B38C1B593BF3}" = rport=138 | protocol=17 | dir=out | app=system |
"{4BD0B932-490A-44E6-8413-6AAD248BC4FA}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{52B87C14-40AD-4620-8020-30E9A76F2144}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{60678A2A-A3C2-43E7-B4A1-D469BBE7AB38}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6A863FE4-07D6-4D7E-BFF5-51BA14E31B50}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{768210B1-2617-4AC4-A786-34D79DB7D23C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{772EA078-AF1A-40C2-93C9-B7F90E9F7165}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{8338086B-2F71-4FE2-9328-877E33F10519}" = lport=445 | protocol=6 | dir=in | app=system |
"{892B10B6-DEA9-4D97-9546-4380E8898870}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{934A7B13-9EA8-43D5-AB5A-B7A35C486D68}" = lport=139 | protocol=6 | dir=in | app=system |
"{A10D9370-3B19-4656-BDC0-214DF4909FCA}" = rport=445 | protocol=6 | dir=out | app=system |
"{A3DDCCBF-AD23-43A1-A5DB-A748CAFAAFF6}" = rport=139 | protocol=6 | dir=out | app=system |
"{B433CC31-8D1A-4588-9701-09F5C0241164}" = rport=10243 | protocol=6 | dir=out | app=system |
"{C491720A-0909-41EE-A09B-0EECF93E4A44}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CB7F70B7-29CA-4C88-AC70-028A11F68107}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D9DF056F-75CF-4F17-8366-89509F7FD1BC}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{DBBB8F1F-9108-4A78-8FF5-1EE0F2EA0D2A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F2B73D2C-BC76-4241-8AEC-C40DDE19B90E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F3D9FB8F-93C3-4221-9D59-83BFF783F73C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F4C05763-8274-4520-9513-BAF02E326910}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{003C6349-8721-4826-BA09-CC1686B1D41F}" = protocol=17 | dir=in | app=d:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |
"{01523972-C1E6-4D3C-BBE0-AD6D32D63DA6}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{0A6D6BE0-743B-4733-B9F0-CDA0BE6FEDF6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{10907D04-45D2-46EC-B14E-64D3EC5A3E76}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1337C396-B970-49F4-BABD-1067541F9F5C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{14F50C63-B575-4914-B7F2-8223FB41A480}" = protocol=17 | dir=in | app=d:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |
"{155658DF-7FA3-4425-A5E1-B1992E8AD029}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1D0CB0B0-D0FB-4220-BCAF-7F8DAD9741DD}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{23445532-EDF2-4615-8301-F25D1CB5BC92}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{375C8D7E-7844-420D-AF6D-160C0B70D32E}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{38505855-B3CA-435D-B0DD-C86ECE4FB34F}" = protocol=6 | dir=in | app=c:\users\daniel\appdata\roaming\utorrent\utorrent.exe |
"{3AEAB774-2386-40B6-B2DC-BB66B827B5DC}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4CDD841A-C573-4FFD-86B1-72A9805F18B6}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{4E011E05-A057-4B9E-8AC7-E04CCC71A08D}" = protocol=6 | dir=in | app=d:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |
"{4F3316D3-AF33-4F34-8EE9-3349235AB49F}" = protocol=6 | dir=out | app=system |
"{500A8315-8FF6-4553-B7CB-E6D661F19A9F}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{558975EB-E95F-4B87-AA66-8EEA64D47425}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{72DCD819-D54D-44FA-A457-B5471C377735}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{7596FFFF-6533-4B9D-A5AC-E393458C42F5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{78B5FEB9-D128-4FBD-9ECB-8B9822740593}" = protocol=17 | dir=in | app=c:\users\daniel\appdata\roaming\utorrent\utorrent.exe |
"{7BD43ABD-A26A-4FAA-8624-AC2A06092289}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{80754C06-3089-4D2F-B56A-1023A7678D62}" = protocol=6 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"{87CAD37A-B0D7-4381-8A51-DE853564AE4B}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{8F1CC870-737F-4984-A0C8-593AFCE82608}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9699C2DE-0FC0-4C3A-A28B-28E5A57F1A85}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{98A153F5-C835-4A53-A820-DCB1B7D9963E}" = protocol=17 | dir=in | app=d:\program files (x86)\steam\steam.exe |
"{9A6C67C9-F8A9-4EBD-8BEA-73744558EAD7}" = protocol=17 | dir=in | app=c:\windows\svchost.exe |
"{9E11629B-676D-4A2C-BD1C-691EBCBDD844}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{9F504C35-5E0A-41F4-9E12-BB46CE141172}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A1799614-ED83-48FF-806B-7DC2D9DC1013}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A768784D-3595-488A-91AE-2BF6CCCA5E21}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AA18F450-CAC1-4323-BD3C-935A61CF6D9C}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{B7710A7C-5A42-4561-9877-E94E6095A256}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C4E2E2F6-8F26-48D6-877B-C7CD219A5CEE}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C5AF616B-30AC-4B43-B0D4-E2B2AA84B2B5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{C69BD80C-9626-4764-B1AF-D9C57F8C5441}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C7F9F22C-1182-43CE-90BF-D8A2DADDBAD6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D788B61A-7DA1-4C44-982A-CFA145D03A9F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{E180D485-70D0-49D7-862F-5F0DD786FB66}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"{E1BCC89C-5B3A-48E7-84A7-C2C1F882A202}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{E868B9E6-B578-43DF-A172-F8E1DD35B5B6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer_service.exe |
"{EDF22726-4E0E-4380-B6AE-CDE4121FA754}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{EE13E98E-8E34-40D5-8DE2-7AC1D146D3EF}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{EEDB478A-F7C3-4F7E-8857-2971D0F7A7E7}" = protocol=6 | dir=in | app=d:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |
"{F6FB6A52-016D-4743-8E6B-3C9C37681E7C}" = protocol=6 | dir=in | app=c:\windows\svchost.exe |
"{FF7BD1BE-ED2E-4253-978F-FFB96AAB1A91}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\teamviewer.exe |
"TCP Query User{155BC112-8BB7-47A5-AC70-758366DD8603}D:\counter-strike 1.6\csko.exe" = protocol=6 | dir=in | app=d:\counter-strike 1.6\csko.exe |
"TCP Query User{25B9571A-310E-4E1F-A593-E9155CE4FA77}C:\counter-strike 1.6\csko.exe" = protocol=6 | dir=in | app=c:\counter-strike 1.6\csko.exe |
"TCP Query User{3BFF659C-E110-4E1E-A098-CC92A3C10E59}C:\program files\dassault systemes\b20\win_b64\code\bin\orbixd.exe" = protocol=6 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\orbixd.exe |
"TCP Query User{7726B9CC-248C-43E5-B9FB-719D41F294B5}C:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe" = protocol=6 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe |
"TCP Query User{A133893C-4A81-4035-AC81-E100742B10AB}D:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" = protocol=6 | dir=in | app=d:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe |
"TCP Query User{ADA46D05-0D3F-4CB0-9D5F-92925F30CAAE}C:\gog games\worms world party remastered\w2.exe" = protocol=6 | dir=in | app=c:\gog games\worms world party remastered\w2.exe |
"TCP Query User{B1B752B2-337B-4DFF-BC54-3B9B9AB21072}D:\max payne 3\maxpayne3.exe" = protocol=6 | dir=in | app=d:\max payne 3\maxpayne3.exe |
"TCP Query User{B6D93CA7-D7F3-4431-8C0F-A38B90915923}D:\counter-strike 1.6\csko.exe" = protocol=6 | dir=in | app=d:\counter-strike 1.6\csko.exe |
"TCP Query User{C22AF866-4D2D-4247-A5FF-961D95A4A73C}D:\valve\hl.exe" = protocol=6 | dir=in | app=d:\valve\hl.exe |
"TCP Query User{DA8715F9-9413-43E3-8FE9-B249468C8178}D:\dead island\deadislandgame.exe" = protocol=6 | dir=in | app=d:\dead island\deadislandgame.exe |
"TCP Query User{DE0FD89D-5864-4C89-82A7-319567EEB9AB}C:\counter-strike 1.6\csko.exe" = protocol=6 | dir=in | app=c:\counter-strike 1.6\csko.exe |
"TCP Query User{EA14E7EE-70B9-4342-844B-588292B142F1}C:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe" = protocol=6 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe |
"UDP Query User{085B39CE-9C31-474C-B617-426AAA61C2A7}D:\counter-strike 1.6\csko.exe" = protocol=17 | dir=in | app=d:\counter-strike 1.6\csko.exe |
"UDP Query User{21BEA028-9788-4E48-ACA1-512C8F21156B}C:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe" = protocol=17 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe |
"UDP Query User{2EA951B2-C97F-4510-95BA-FF3FE49F240A}D:\max payne 3\maxpayne3.exe" = protocol=17 | dir=in | app=d:\max payne 3\maxpayne3.exe |
"UDP Query User{5BF8490F-E4D7-4028-9B29-15B85E3463FF}C:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe" = protocol=17 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\cnext.exe |
"UDP Query User{73EEB19E-3C12-4824-8639-3E0FFE79FFDD}D:\dead island\deadislandgame.exe" = protocol=17 | dir=in | app=d:\dead island\deadislandgame.exe |
"UDP Query User{ABE7249D-12A2-494C-BC14-3D76B2F59D03}D:\counter-strike 1.6\csko.exe" = protocol=17 | dir=in | app=d:\counter-strike 1.6\csko.exe |
"UDP Query User{B717E2C1-C4A8-429F-A9A7-3FB2CC9D9BDF}D:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" = protocol=17 | dir=in | app=d:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe |
"UDP Query User{C5C0F59E-1B4A-4BD9-B3F9-9BEDF5C9D481}C:\counter-strike 1.6\csko.exe" = protocol=17 | dir=in | app=c:\counter-strike 1.6\csko.exe |
"UDP Query User{CE9C5ACC-C0EF-47EA-89D9-2C0E94E5EB4E}C:\counter-strike 1.6\csko.exe" = protocol=17 | dir=in | app=c:\counter-strike 1.6\csko.exe |
"UDP Query User{CECC0904-AB81-47F7-852F-814E4497A39A}C:\gog games\worms world party remastered\w2.exe" = protocol=17 | dir=in | app=c:\gog games\worms world party remastered\w2.exe |
"UDP Query User{E93482CF-580E-410C-9062-0BD634FFF7DD}D:\valve\hl.exe" = protocol=17 | dir=in | app=d:\valve\hl.exe |
"UDP Query User{F2945B3B-CD33-40C9-9F9F-46706287AD53}C:\program files\dassault systemes\b20\win_b64\code\bin\orbixd.exe" = protocol=17 | dir=in | app=c:\program files\dassault systemes\b20\win_b64\code\bin\orbixd.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{034B6AC8-DCF6-585B-2AFD-3FF0D4A559BB}" = AMD Accelerated Video Transcoding
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.8
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series" = Canon MP280 series MP Drivers
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2FD0FA0A-7A21-4C4A-B268-1142B54E035E}" = Windows Live Family Safety
"{30921AC4-6875-F7DF-B48B-2BB68C000BB6}" = AMD Media Foundation Decoders
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{37FCE154-7F59-74F0-3A35-BF503CEB230B}" = AMD Catalyst Install Manager
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5EEC477F-8E9B-4420-8829-16E7426227DB}" = Windows Live MIME IFilter
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
"{6C676266-91E4-DC71-E661-13494AC29A3E}" = ccc-utility64
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{999DB5B3-EE44-8837-2B51-4AF44CD1FD22}" = AMD Drag and Drop Transcoding
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{CF1EB598-B424-436A-B15F-B763846BA970}" = Dassault Systemes Software Prerequisites x86-x64
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"4D0A78D60CE7E81C31D46CB92DBA41CCF993C9BD" = Windows Driver Package - Chicony (usbvideo) Image (05/12/2009 6.3.251.0512)
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.24
"D27D7E9318CFA89EDDE8D448B507A8EB725F5A52" = Windows Driver Package - TOSHIBA (FwLnk) System (11/19/2006 1.0.0.3)
"Dassault Systemes B20_0" = Dassault Systemes Software B20
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR 5.00 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00F14E5B-E07A-2A1E-6788-580773CE1486}" = CCC Help English
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{0A036215-0A8D-6FBE-7EA3-7AED4F9E162A}" = CCC Help Turkish
"{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{15A05AAA-37E7-D516-5BE9-C960C2170403}" = CCC Help Czech
"{1B87C40B-A60B-4EF3-9A68-706CF4B69978}" = Toshiba Assist
"{21E9850E-58C2-FA88-D5AD-B64D253B8F82}" = CCC Help Thai
"{25A7270E-1B63-DFD1-ACBC-88852A305398}" = CCC Help Chinese Traditional
"{28164BD8-81EA-639A-85E9-E659E3EE6DA7}" = Catalyst Control Center InstallProxy
"{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack
"{2E69E784-F84A-9A18-7D8E-4EB8504EEE1E}" = CCC Help Danish
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{362614E4-9ABB-E7A7-CDDC-239AB168060A}" = CCC Help Japanese
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
"{4745F6F8-09DA-CC39-EC19-0E8D764CF2B7}" = CCC Help Chinese Standard
"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth
"{4FA31DE2-B613-24BB-1738-B655C00B1C9D}" = CCC Help Hungarian
"{58771CF6-F212-CC4D-61B1-45CC70B6375C}" = CCC Help Dutch
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{6389F199-1D6C-4974-9557-693F9DD48736}" = Windows Live Writer Resources
"{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{6D5CE5F1-CBB0-9ED4-1A1E-91DDCD6225FD}" = CCC Help Italian
"{707210B0-29F1-C550-BA96-6ECDA245CF24}" = CCC Help Spanish
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.18
"{7C6F0282-3DCD-4A80-95AC-BB298E821C44}" = Windows Live Writer
"{812B956B-37AB-24B9-4527-78A6D3ECE7F8}" = CCC Help Korean
"{83293709-B863-0EF6-00DA-B026D486E8B5}" = CCC Help Polish
"{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding
"{89870E0D-9602-41F8-9E83-14F6849346A4}" = Windows Live Mail
"{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{911904DE-EBB6-BC8E-D5BD-762B7DB42C46}" = CCC Help Greek
"{9903011B-5F1D-A2A1-8078-EE62B3324CCE}" = CCC Help Portuguese
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A7F1628-2126-34A5-852D-2B93328BCF3F}" = CCC Help German
"{9C6D5C94-386A-4DE7-B99F-523D3F167B9A}" = Windows Live Messenger
"{A13D16C5-38A9-4D96-9647-59FCCAB12A85}" = Visual Basic for Applications (R) Core - English
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAA94EAA-40A4-458C-9D86-D1DA765B51D5}" = Windows Live Writer
"{AAF91344-2808-4D6B-9242-FBE5AF79D60A}" = Windows Live Family Safety
"{AE6C422B-DADB-D547-411C-E9E56DF03D16}" = CCC Help Russian
"{B09567CC-E43F-10F1-752D-549AC7FB0C43}" = CCC Help Finnish
"{B170B91D-E8E3-A6A3-D129-D8E36FEA8A0B}" = CCC Help Norwegian
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B286BAC3-CBE6-4854-BF68-EB72A34CEA56}" = Windows Live Messenger
"{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker
"{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}" = VBA (3821b)
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{BD96ABD3-D1D4-5513-6C60-11476D6DCFC5}" = Catalyst Control Center Localization All
"{C39C7876-4D21-8A38-0A42-B5C8858EC6C7}" = CCC Help French
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D4236B82-213F-679E-09A2-9AEB5EF4CADC}" = Catalyst Control Center Graphics Previews Common
"{D604900F-A275-416C-AF9D-CDEDF58B72DB}" = Windows Live Mail
"{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{EBBD4FE6-91DA-C397-6D56-FE85DBF24FCF}" = Catalyst Pro Control Center
"{EFBCA571-617D-484A-9ECA-E301BB6D0750}" = Windows Live Writer
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}" = Junk Mail filter update
"{FB97C283-1F3C-42D4-AE01-ADC1DC12F774}" = Visual Basic for Applications (R) Core
"{FCEFDA6B-63CD-BB17-B845-478A42E24D39}" = CCC Help Swedish
"1433238834_is1" = Worms World Party Remastered
"Adobe Flash Player ActiveX" = Adobe Flash Player 20 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 20 NPAPI
"Adobe Flash Player PPAPI" = Adobe Flash Player 20 PPAPI
"Canon MP280 series User Registration" = Canon MP280 series User Registration
"CanonMyPrinter" = Canon My Printer
"CanonSolutionMenuEX" = Canon Solution Menu EX
"DAEMON Tools Lite" = DAEMON Tools Lite
"Easy-PhotoPrint EX" = Canon Easy-PhotoPrint EX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Fallout New Vegas - Ultimate Edition_is1" = Fallout New Vegas - Ultimate Edition
"InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"InstallShield_{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware verzia 2.2.0.1024
"Mozilla Firefox 39.0 (x86 en-US)" = Mozilla Firefox 39.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 4.0" = Canon MP Navigator EX 4.0
"Opera 28.0.1750.51" = Opera Stable 28.0.1750.51
"Opera 30.0.1835.125" = Opera Stable 30.0.1835.125
"Opera 34.0.2036.50" = Opera Stable 34.0.2036.50
"PDF to Doc Converter 6.0" = PDF to Doc Converter 6.0
"Rockstar Games Social Club" = Rockstar Games Social Club
"Sniper Ghost Warrior - Gold Edition_is1" = Sniper Ghost Warrior - Gold Edition
"ST6UNST #1" = UV_5R_VIP
"ST6UNST #2" = UV_5R_VIP (C:\Program Files (x86)\UV_5R_VIP\)
"TargetExpress" = TargetExpress
"TeamViewer" = TeamViewer 10
"VLC media player" = VLC media player
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3421165169-2951040824-594340821-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 10. 9. 2015 12:16:31 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is not formatted
correctly. The malformed string is 7706. The first DWORD in the Data section contains
the index value to the malformed string while the second and third DWORDs in the
Data section contain the last valid index values.

Error - 10. 9. 2015 12:16:31 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The first DWORD in the Data section contains the error code.

Error - 10. 9. 2015 12:16:34 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is not formatted
correctly. The malformed string is 7706. The first DWORD in the Data section contains
the index value to the malformed string while the second and third DWORDs in the
Data section contain the last valid index values.

Error - 25. 9. 2015 11:13:03 | Computer Name = Daniel-PC | Source = Microsoft-Windows-CAPI2 | ID = 257
Description = The Cryptographic Services service failed to initialize the Catalog
Database. The ESENT error was: -550.

Error - 26. 9. 2015 15:12:47 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is not formatted
correctly. The malformed string is 7706. The first DWORD in the Data section contains
the index value to the malformed string while the second and third DWORDs in the
Data section contain the last valid index values.

Error - 26. 9. 2015 15:12:47 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The first DWORD in the Data section contains the error code.

Error - 26. 9. 2015 15:12:50 | Computer Name = Daniel-PC | Source = Microsoft-Windows-LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is not formatted
correctly. The malformed string is 7706. The first DWORD in the Data section contains
the index value to the malformed string while the second and third DWORDs in the
Data section contain the last valid index values.

Error - 8. 1. 2016 16:50:34 | Computer Name = Daniel-PC | Source = VSS | ID = 12310
Description =

Error - 8. 1. 2016 16:50:35 | Computer Name = Daniel-PC | Source = VSS | ID = 12298
Description =

Error - 26. 1. 2016 15:49:19 | Computer Name = Daniel-PC | Source = Application Hang | ID = 1002
Description = The program FalloutNV.exe version 1.4.0.525 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: cc8 Start
Time: 01d158665e4f20ea Termination Time: 151 Application Path: D:\Fallout New Vegas
- Ultimate Edition\FalloutNV.exe Report Id:

[ OSession Events ]
Error - 12. 1. 2014 16:46:22 | Computer Name = Daniel-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 75
seconds with 60 seconds of active time. This session ended with a crash.

Error - 19. 5. 2014 10:59:21 | Computer Name = Daniel-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 31792
seconds with 7740 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 1. 2. 2016 16:20:28 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Služba
Google Update (gupdate) service to connect.

Error - 1. 2. 2016 16:20:28 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The Služba Google Update (gupdate) service failed to start due to
the following error: %%1053

Error - 2. 2. 2016 13:55:30 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The aswMonFlt service failed to start due to the following error:
%%2

Error - 2. 2. 2016 13:55:32 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The aswStm service failed to start due to the following error: %%2

Error - 2. 2. 2016 13:55:33 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001
Description = The Avast Antivirus service depends on the aswMonFlt service which
failed to start because of the following error: %%2

Error - 2. 2. 2016 13:55:33 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The avast! Firewall service failed to start due to the following error:
%%2

Error - 2. 2. 2016 13:55:35 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The avast! HardwareID service failed to start due to the following
error: %%2

Error - 2. 2. 2016 13:55:52 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
aswKbd aswRdr aswRvrt aswSnx aswSP aswVmm

Error - 2. 2. 2016 13:57:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Služba
Google Update (gupdate) service to connect.

Error - 2. 2. 2016 13:57:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000
Description = The Služba Google Update (gupdate) service failed to start due to
the following error: %%1053


< End of report >

Tak legální, říkáte? Nač je tedy v systému nelegální aktivátor? Ten v orig. systému k ničemu nepotřebujete.

Ano, system bol na pocitaci nainstalovany pri jeho zakupeni. Priznam sa, ze pocitac neni moj ale kamosov, vraj mu niekto radil aby tym aktivatorom skusil Windows aktivovat a vyriesit tym problem s nedobre fungujucim odhlasovanim zo systemu, nie vzdy mu totiz vyplo pocitac a musel ho vypinat natvrdo.

mah32 píše:jedna sa samozrejme o legalny system

Mohl jste to přiznat rovnou, neboť efekt by byl stejný. Podle pravidel fóra: http://forum.viry.cz/viewtopic.php?f=12&t=115512 vám nemohu pomoci. Crycklý systém se chová jinak, než originál a já nemám zájem, abych ještě opravoval systém po čištění, pokd by případně spadl. Takto jste si vysloužil navíc varování 3.st. Ne za ten cracklý systém, ale za tu lež.

neklamem. ako inak vam mam dokazat, ze sa jedna o pravy system?

Jak vidíte, tak nejedná. Orig. systém se aktivuje sám pouhým připojením k internetu a nepotřebuje aktivátor. Toto je vyloženě cracklý systém.

system aktivovany bol. Vravim, niekto mojmu kamosovi, neodborne poradil, vraj ten aktivator na vyriesenie jeho problemu pri vypinani pocitaca, to je dovod preco tam ten aktivator moj kamos, pocitacovy laik, dal. Znovu opakujem, jedna sa o riadny system, legalny.

Jsem už dost dlouho na tomto fóru, abych věděl, jak se crackují oper. systémy. Pro mne přítomnost nelegálního aktivátoru znamená, že oper. systém není legální. A buďte si jist, že jsem se ještě nikdy nemýlil. Navíc:

mah32 píše:...vraj mu niekto radil aby tym aktivatorom skusil Windows aktivovat a vyriesit tym problem s nedobre fungujucim odhlasovanim..

toto považuji za báchorku. Nelegální aktivátor systém upraví tak, aby se navenek tvářil jako legálně aktivovaný. Nic jiného neumí.