API tools faq
paste
Guest User

OTL-28.12.2013

a guest
Dec 28th, 2013
126
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 136.56 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 28.12.2013 20:37:00 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jindřich Žák\Desktop
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.16428)
  5. Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
  6.  
  7. 7,95 Gb Total Physical Memory | 5,23 Gb Available Physical Memory | 65,76% Memory free
  8. 15,91 Gb Paging File | 12,65 Gb Available in Paging File | 79,53% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 223,47 Gb Total Space | 131,56 Gb Free Space | 58,87% Space Free | Partition Type: NTFS
  13. Drive D: | 372,60 Gb Total Space | 262,55 Gb Free Space | 70,46% Space Free | Partition Type: NTFS
  14. Drive E: | 537,60 Gb Total Space | 411,64 Gb Free Space | 76,57% Space Free | Partition Type: NTFS
  15. Drive H: | 5,22 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  16.  
  17. Computer Name: JINDRICHZAK-PC | User Name: Jindřich Žák | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013.12.27 23:37:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jindřich Žák\Desktop\OTL.exe
  24. PRC - [2013.12.18 02:02:36 | 030,714,312 | ---- | M] (Dropbox, Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\Dropbox.exe
  25. PRC - [2013.12.17 11:38:33 | 005,341,536 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
  26. PRC - [2013.12.17 11:38:32 | 013,543,264 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
  27. PRC - [2013.12.17 11:22:10 | 000,199,520 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
  28. PRC - [2013.12.07 18:34:24 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
  29. PRC - [2013.12.04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  30. PRC - [2013.09.12 12:06:22 | 001,337,752 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
  31. PRC - [2013.08.14 08:52:30 | 000,248,704 | ---- | M] () -- C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
  32. PRC - [2013.06.21 04:15:56 | 000,413,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  33. PRC - [2013.05.11 11:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  34. PRC - [2013.04.04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  35. PRC - [2013.04.04 13:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  36. PRC - [2013.04.04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
  37. PRC - [2012.11.26 09:36:04 | 000,184,704 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  38. PRC - [2012.11.14 13:42:46 | 000,106,880 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
  39. PRC - [2012.10.17 18:08:40 | 000,205,184 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
  40. PRC - [2012.09.14 12:14:16 | 000,328,064 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
  41. PRC - [2012.08.22 08:24:26 | 001,558,912 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
  42. PRC - [2012.07.17 13:57:22 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  43. PRC - [2012.07.17 13:57:20 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  44. PRC - [2012.06.25 09:57:14 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  45. PRC - [2012.06.04 13:52:04 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  46. PRC - [2011.11.25 15:32:36 | 000,687,400 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
  47. PRC - [2011.11.21 13:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  48. PRC - [2010.08.31 08:26:56 | 007,699,456 | ---- | M] (AnyDATA.NET) -- C:\Program Files\Anydata\Anydata ADU-770WH\Anydata ADU-770WH.exe
  49. PRC - [2009.06.19 09:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
  50. PRC - [2009.06.19 09:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
  51. PRC - [2008.12.22 16:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
  52.  
  53.  
  54. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  55.  
  56. MOD - [2013.12.18 02:01:12 | 003,558,400 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
  57. MOD - [2013.12.04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll
  58. MOD - [2013.12.04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
  59. MOD - [2013.12.04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
  60. MOD - [2013.12.04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
  61. MOD - [2013.12.04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
  62. MOD - [2013.10.31 20:44:43 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bcf51dc88597d0835c819a2d5a755b74\PresentationFramework.ni.dll
  63. MOD - [2013.10.31 20:44:33 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll
  64. MOD - [2013.10.31 20:44:28 | 012,238,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\51478a61dbd40488e320a0061e23c4df\PresentationCore.ni.dll
  65. MOD - [2013.10.31 20:44:21 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4eef5a3a4d0ed6d6fd882947a70df530\WindowsBase.ni.dll
  66. MOD - [2013.10.31 20:44:19 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll
  67. MOD - [2013.09.21 20:32:22 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
  68. MOD - [2013.09.21 20:32:09 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
  69. MOD - [2013.09.21 20:32:06 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
  70. MOD - [2013.09.05 00:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
  71. MOD - [2013.08.23 20:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\libcef.dll
  72. MOD - [2013.07.12 19:14:21 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a2920ed81e097f8551231a9350697bbd\PresentationFramework.Aero.ni.dll
  73. MOD - [2013.07.12 19:13:30 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
  74. MOD - [2012.09.24 16:42:20 | 000,020,360 | ---- | M] () -- C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
  75. MOD - [2011.04.12 09:34:17 | 000,237,568 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll
  76. MOD - [2011.04.12 09:34:17 | 000,086,016 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\WindowsBase.resources\3.0.0.0_cs_31bf3856ad364e35\WindowsBase.resources.dll
  77. MOD - [2010.11.13 03:00:59 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
  78. MOD - [2009.07.14 02:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\SysWOW64\msjetoledb40.dll
  79. MOD - [2008.08.26 02:34:30 | 000,106,496 | ---- | M] () -- C:\Program Files\Anydata\Anydata ADU-770WH\UMI.dll
  80.  
  81.  
  82. [color=#E56717]========== Services (SafeList) ==========[/color]
  83.  
  84. SRV:[b]64bit:[/b] - [2013.11.26 10:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  85. SRV:[b]64bit:[/b] - [2013.09.12 12:06:22 | 001,337,752 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
  86. SRV:[b]64bit:[/b] - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  87. SRV:[b]64bit:[/b] - [2012.04.20 13:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  88. SRV:[b]64bit:[/b] - [2010.07.01 02:36:58 | 000,444,928 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\EPSON\EPuras\EPurasLog.exe -- (EpsonPurasLog)
  89. SRV:[b]64bit:[/b] - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  90. SRV - [2013.12.23 23:27:55 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  91. SRV - [2013.12.17 11:38:33 | 005,341,536 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
  92. SRV - [2013.12.10 21:53:26 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  93. SRV - [2013.12.09 12:08:00 | 000,096,184 | ---- | M] (Overwolf) [On_Demand | Stopped] -- C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
  94. SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  95. SRV - [2013.09.05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  96. SRV - [2013.08.14 08:52:30 | 000,248,704 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe -- (UsbClientService)
  97. SRV - [2013.06.21 04:15:56 | 000,413,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  98. SRV - [2013.05.27 14:58:12 | 003,692,536 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
  99. SRV - [2013.05.11 11:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  100. SRV - [2013.04.04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  101. SRV - [2013.04.04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  102. SRV - [2013.01.31 10:35:50 | 002,402,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  103. SRV - [2012.11.14 13:42:46 | 000,106,880 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
  104. SRV - [2012.09.24 16:40:58 | 001,127,840 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
  105. SRV - [2012.09.14 11:20:40 | 007,024,712 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv)
  106. SRV - [2012.07.17 13:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  107. SRV - [2012.07.17 13:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  108. SRV - [2012.06.25 09:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
  109. SRV - [2011.11.25 15:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
  110. SRV - [2011.11.21 13:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
  111. SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  112. SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  113.  
  114.  
  115. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  116.  
  117. DRV:[b]64bit:[/b] - [2013.12.23 22:53:02 | 000,046,368 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
  118. DRV:[b]64bit:[/b] - [2013.10.19 10:21:37 | 000,044,448 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\libusb0.sys -- (libusb0)
  119. DRV:[b]64bit:[/b] - [2013.09.17 15:17:38 | 000,239,320 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
  120. DRV:[b]64bit:[/b] - [2013.09.17 15:17:38 | 000,220,232 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
  121. DRV:[b]64bit:[/b] - [2013.09.17 15:17:38 | 000,168,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
  122. DRV:[b]64bit:[/b] - [2013.09.17 15:17:38 | 000,062,136 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
  123. DRV:[b]64bit:[/b] - [2013.09.17 15:17:38 | 000,044,120 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
  124. DRV:[b]64bit:[/b] - [2013.08.29 02:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  125. DRV:[b]64bit:[/b] - [2013.06.21 13:02:43 | 000,448,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
  126. DRV:[b]64bit:[/b] - [2013.05.27 14:58:12 | 001,340,040 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpman.sys -- (tdrpman)
  127. DRV:[b]64bit:[/b] - [2013.05.27 14:58:12 | 000,367,200 | ---- | M] (Acronis) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp)
  128. DRV:[b]64bit:[/b] - [2013.05.27 14:58:11 | 001,093,256 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tib_mounter.sys -- (tib_mounter)
  129. DRV:[b]64bit:[/b] - [2013.05.27 14:58:11 | 000,228,488 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vididr.sys -- (vididr)
  130. DRV:[b]64bit:[/b] - [2013.05.27 14:58:11 | 000,166,024 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vidsflt.sys -- (vidsflt)
  131. DRV:[b]64bit:[/b] - [2013.05.27 14:58:10 | 000,340,104 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
  132. DRV:[b]64bit:[/b] - [2013.05.27 14:58:10 | 000,155,272 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fltsrv.sys -- (fltsrv)
  133. DRV:[b]64bit:[/b] - [2013.05.20 16:10:40 | 000,450,872 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  134. DRV:[b]64bit:[/b] - [2013.05.20 16:09:53 | 000,043,832 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
  135. DRV:[b]64bit:[/b] - [2013.05.20 15:25:07 | 000,110,744 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  136. DRV:[b]64bit:[/b] - [2013.04.04 13:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  137. DRV:[b]64bit:[/b] - [2013.03.11 10:00:00 | 003,879,936 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  138. DRV:[b]64bit:[/b] - [2013.02.25 06:27:45 | 000,194,848 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  139. DRV:[b]64bit:[/b] - [2013.02.22 06:32:08 | 000,160,256 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ser2pl64.sys -- (Ser2pl)
  140. DRV:[b]64bit:[/b] - [2012.12.21 13:53:58 | 000,017,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
  141. DRV:[b]64bit:[/b] - [2012.12.21 13:53:58 | 000,009,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
  142. DRV:[b]64bit:[/b] - [2012.08.23 15:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  143. DRV:[b]64bit:[/b] - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  144. DRV:[b]64bit:[/b] - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  145. DRV:[b]64bit:[/b] - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  146. DRV:[b]64bit:[/b] - [2012.08.03 10:36:52 | 000,055,776 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\busenum.sys -- (busenum)
  147. DRV:[b]64bit:[/b] - [2012.07.02 14:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  148. DRV:[b]64bit:[/b] - [2012.06.04 13:52:04 | 000,787,736 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  149. DRV:[b]64bit:[/b] - [2012.06.04 13:52:04 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  150. DRV:[b]64bit:[/b] - [2012.06.04 13:52:04 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  151. DRV:[b]64bit:[/b] - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  152. DRV:[b]64bit:[/b] - [2011.12.01 10:42:44 | 000,072,240 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVol.sys -- (NBVol)
  153. DRV:[b]64bit:[/b] - [2011.12.01 10:42:44 | 000,015,920 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVolUp.sys -- (NBVolUp)
  154. DRV:[b]64bit:[/b] - [2011.08.17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  155. DRV:[b]64bit:[/b] - [2011.08.17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  156. DRV:[b]64bit:[/b] - [2011.08.17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  157. DRV:[b]64bit:[/b] - [2011.08.17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  158. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  159. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  160. DRV:[b]64bit:[/b] - [2011.02.16 16:53:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
  161. DRV:[b]64bit:[/b] - [2010.11.21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  162. DRV:[b]64bit:[/b] - [2010.11.21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  163. DRV:[b]64bit:[/b] - [2010.11.21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  164. DRV:[b]64bit:[/b] - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  165. DRV:[b]64bit:[/b] - [2009.11.06 03:22:02 | 000,154,112 | ---- | M] (AnyDATA.NET INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\adusbser.sys -- (adusbser)
  166. DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  167. DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  168. DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  169. DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  170. DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  171. DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  172. DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  173. DRV:[b]64bit:[/b] - [2009.03.07 04:30:42 | 000,053,816 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\DgivEcp.sys -- (DgiVecp)
  174. DRV:[b]64bit:[/b] - [2007.11.22 01:39:24 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.sys -- (SSPORT)
  175. DRV - [2012.12.21 13:54:00 | 000,014,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
  176. DRV - [2012.12.21 13:53:58 | 000,009,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
  177. DRV - [2012.11.16 16:51:26 | 000,011,880 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  178. DRV - [2011.09.07 08:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
  179. DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
  180. DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  181. DRV - [2009.07.02 16:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
  182.  
  183.  
  184. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  185.  
  186.  
  187. [color=#E56717]========== Internet Explorer ==========[/color]
  188.  
  189. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  190. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  191. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  192. IE - HKLM\..\SearchScopes,DefaultScope =
  193. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  194.  
  195. IE - HKCU\..\SearchScopes,DefaultScope =
  196. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  197. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  198.  
  199.  
  200. [color=#E56717]========== FireFox ==========[/color]
  201.  
  202. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
  203. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  204. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  205. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  206. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
  207. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
  208. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
  209. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  210. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  211. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  212. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  213. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  214. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  215. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  216. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  217. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  218. FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
  219. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  220. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  221. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  222. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  223. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  224. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
  225. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
  226.  
  227. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2013.11.19 19:34:22 | 000,000,000 | ---D | M]
  228. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013.11.19 19:34:22 | 000,000,000 | ---D | M]
  229.  
  230. [2013.05.21 21:52:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jindřich Žák\AppData\Roaming\Mozilla\Extensions
  231.  
  232. [color=#E56717]========== Chrome ==========[/color]
  233.  
  234. CHR - default_search_provider: Google (Enabled)
  235. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  236. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  237. CHR - homepage: http://www.seznam.cz/
  238. CHR - Extension: Dokumenty Google = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  239. CHR - Extension: Disk Google = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
  240. CHR - Extension: YouTube = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
  241. CHR - Extension: Adblock Plus = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\
  242. CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
  243. CHR - Extension: Pen\u011B\u017Eenka Google = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\
  244. CHR - Extension: Download Station for Google Chrome = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\onhbegdkgonhlokobjefolhpoidcnida\2.1.1_0\
  245. CHR - Extension: Gmail = C:\Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
  246.  
  247. O1 HOSTS File: ([2013.05.27 14:58:44 | 000,002,988 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  248. O1 - Hosts: 127.0.0.1 192.150.14.69
  249. O1 - Hosts: 127.0.0.1 192.150.18.101
  250. O1 - Hosts: 127.0.0.1 192.150.18.108
  251. O1 - Hosts: 127.0.0.1 192.150.22.40
  252. O1 - Hosts: 127.0.0.1 192.150.8.100
  253. O1 - Hosts: 127.0.0.1 192.150.8.118
  254. O1 - Hosts: 127.0.0.1 209-34-83-73.ood.opsource.net
  255. O1 - Hosts: 127.0.0.1 3dns-1.adobe.com
  256. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  257. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  258. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  259. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  260. O1 - Hosts: 127.0.0.1 3dns-4.adobe.com
  261. O1 - Hosts: 127.0.0.1 3dns.adobe.com
  262. O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
  263. O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
  264. O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
  265. O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
  266. O1 - Hosts: 127.0.0.1 activate.adobe.com
  267. O1 - Hosts: 127.0.0.1 activate.adobe.com
  268. O1 - Hosts: 127.0.0.1 activate.wip.adobe.com
  269. O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com
  270. O1 - Hosts: 127.0.0.1 activate.wip2.adobe.com
  271. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  272. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  273. O1 - Hosts: 45 more lines...
  274. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  275. O2 - BHO: (Samsung BHO Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll ()
  276. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  277. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  278. O4:[b]64bit:[/b] - HKLM..\Run: [Ask Mr. Robot] C:\Program Files\AskMrRobot\AmrTray.exe ()
  279. O4:[b]64bit:[/b] - HKLM..\Run: [AsusNewUI] C:\Program Files\Synaptics\SynTP\AsusNewUI35.exe ()
  280. O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
  281. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  282. O4:[b]64bit:[/b] - HKLM..\Run: [Služba Acronis Scheduler2] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
  283. O4:[b]64bit:[/b] - HKLM..\Run: [SynAsusGestureAPIMgr] C:\Program Files\Synaptics\SynTP\SynAsusGestureAPIMgr.exe (Synaptics)
  284. O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis)
  285. O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
  286. O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
  287. O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.)
  288. O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
  289. O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
  290. O4 - HKLM..\Run: [NBAgent] C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe (Nero AG)
  291. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  292. O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
  293. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  294. O4 - Startup: C:\Users\Jindřich Žák\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Deadly Boss Mods Updater.lnk = C:\Program Files (x86)\Master Games International\Deadly Boss Mods Updater\Deadly Boss Mods Updater.exe ()
  295. O4 - Startup: C:\Users\Jindřich Žák\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
  296. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  297. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  298. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  299. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  300. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  301. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  302. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
  303. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  304. O8:[b]64bit:[/b] - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll2.htm ()
  305. O8:[b]64bit:[/b] - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll1.htm ()
  306. O8:[b]64bit:[/b] - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll.htm ()
  307. O8:[b]64bit:[/b] - Extra context menu item: SmarThru4 Web Capture - C:\Program Files (x86)\SmarThru 4\WebCapture.dll ()
  308. O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll2.htm ()
  309. O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll1.htm ()
  310. O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files (x86)\SmarThru 4\WEBCapture.dll.htm ()
  311. O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files (x86)\SmarThru 4\WebCapture.dll ()
  312. O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll ()
  313. O13[b]64bit:[/b] - gopher Prefix: missing
  314. O13 - gopher Prefix: missing
  315. O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab (asusTek_sysctrl Class)
  316. O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.13.0.cab (SysInfo Class)
  317. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  318. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCA66AF8-EF73-4E81-9EDD-CC388EE14F67}: DhcpNameServer = 192.168.0.1
  319. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EAAF58B7-0743-43F9-B3CA-73F06AF32837}: NameServer = 160.218.161.60 194.228.211.33
  320. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  321. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  322. O18 - Protocol\Handler\ms-help - No CLSID value found
  323. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  324. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  325. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  326. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  327. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  328. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  329. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  330. O27:[b]64bit:[/b] - HKLM IFEO\deadly boss mods updater.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  331. O27:[b]64bit:[/b] - HKLM IFEO\mediabuilder.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  332. O27:[b]64bit:[/b] - HKLM IFEO\trueimagelauncher.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  333. O27:[b]64bit:[/b] - HKLM IFEO\trueimagetools.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  334. O27 - HKLM IFEO\deadly boss mods updater.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  335. O27 - HKLM IFEO\mediabuilder.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  336. O27 - HKLM IFEO\trueimagelauncher.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  337. O27 - HKLM IFEO\trueimagetools.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe (TuneUp Software)
  338. O32 - HKLM CDRom: AutoRun - 1
  339. O32 - AutoRun File - [2009.10.20 08:14:22 | 000,000,042 | R--- | M] () - H:\autorun.inf -- [ CDFS ]
  340. O33 - MountPoints2\{15421603-c4a0-11e2-b868-6c71d9201cce}\Shell - "" = AutoRun
  341. O33 - MountPoints2\{15421603-c4a0-11e2-b868-6c71d9201cce}\Shell\AutoRun\command - "" = H:\Launcher.exe -- [2009.11.23 09:55:47 | 000,229,376 | R--- | M] (AnyDATA.NET)
  342. O33 - MountPoints2\{65b56f15-22f4-11e3-a931-6c71d9201cce}\Shell - "" = AutoRun
  343. O33 - MountPoints2\{65b56f15-22f4-11e3-a931-6c71d9201cce}\Shell\AutoRun\command - "" = G:\Launcher.exe
  344. O33 - MountPoints2\{b4282b52-d909-11e2-8914-6c71d9201cce}\Shell - "" = AutoRun
  345. O33 - MountPoints2\{b4282b52-d909-11e2-8914-6c71d9201cce}\Shell\AutoRun\command - "" = G:\unlock.exe autoplay=true
  346. O33 - MountPoints2\{b9db221f-c2cf-11e2-974b-6c71d9201cce}\Shell - "" = AutoRun
  347. O33 - MountPoints2\{b9db221f-c2cf-11e2-974b-6c71d9201cce}\Shell\AutoRun\command - "" = H:\Launcher.exe -- [2009.11.23 09:55:47 | 000,229,376 | R--- | M] (AnyDATA.NET)
  348. O33 - MountPoints2\{b9db2223-c2cf-11e2-974b-6c71d9201cce}\Shell - "" = AutoRun
  349. O33 - MountPoints2\{b9db2223-c2cf-11e2-974b-6c71d9201cce}\Shell\AutoRun\command - "" = G:\Launcher.exe
  350. O33 - MountPoints2\G\Shell - "" = AutoRun
  351. O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\Launcher.exe
  352. O34 - HKLM BootExecute: (autocheck autochk *)
  353. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  354. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  355. O35 - HKLM\..comfile [open] -- "%1" %*
  356. O35 - HKLM\..exefile [open] -- "%1" %*
  357. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  358. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  359. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  360. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  361. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  362. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  363. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  364.  
  365. CREATERESTOREPOINT
  366. Restore point Set: OTL Restore Point
  367.  
  368. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  369.  
  370. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  371. Drivers32:[b]64bit:[/b] VIDC.FPS1 - frapsv64.dll (Beepa P/L)
  372. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  373. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  374. Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
  375. PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
  376.  
  377. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  378.  
  379. [2013.12.28 02:18:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Media Preview
  380. [2013.12.28 02:18:27 | 000,000,000 | ---D | C] -- C:\Program Files\Media Preview
  381. [2013.12.28 02:18:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft
  382. [2013.12.27 23:37:15 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jindřich Žák\Desktop\OTL.exe
  383. [2013.12.27 23:07:38 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  384. [2013.12.27 22:56:52 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
  385. [2013.12.27 00:57:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
  386. [2013.12.24 00:05:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
  387. [2013.12.24 00:05:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
  388. [2013.12.24 00:05:40 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\Documents\My ISO Files
  389. [2013.12.23 23:24:08 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
  390. [2013.12.23 23:24:08 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
  391. [2013.12.23 23:24:08 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
  392. [2013.12.23 23:24:07 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
  393. [2013.12.23 23:24:07 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
  394. [2013.12.23 23:24:07 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
  395. [2013.12.23 23:24:07 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
  396. [2013.12.23 23:24:07 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
  397. [2013.12.23 23:24:07 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
  398. [2013.12.23 23:24:07 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
  399. [2013.12.23 23:24:07 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
  400. [2013.12.23 23:24:06 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
  401. [2013.12.23 23:24:06 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
  402. [2013.12.23 23:24:06 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
  403. [2013.12.23 23:24:06 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
  404. [2013.12.23 23:24:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
  405. [2013.12.23 23:24:06 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
  406. [2013.12.23 23:24:05 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
  407. [2013.12.23 23:24:05 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
  408. [2013.12.23 23:24:05 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
  409. [2013.12.23 23:24:05 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
  410. [2013.12.23 23:24:05 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
  411. [2013.12.23 23:24:05 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
  412. [2013.12.23 23:24:05 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
  413. [2013.12.23 23:24:05 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
  414. [2013.12.23 23:24:04 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
  415. [2013.12.23 23:24:04 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
  416. [2013.12.23 23:24:04 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
  417. [2013.12.23 23:24:04 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
  418. [2013.12.23 23:24:04 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
  419. [2013.12.23 23:24:04 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
  420. [2013.12.23 23:24:04 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
  421. [2013.12.23 23:24:04 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
  422. [2013.12.23 23:24:04 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
  423. [2013.12.23 23:24:04 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
  424. [2013.12.23 23:24:03 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
  425. [2013.12.23 23:24:03 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
  426. [2013.12.23 23:24:03 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
  427. [2013.12.23 23:24:03 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
  428. [2013.12.23 23:24:03 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
  429. [2013.12.23 23:24:03 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
  430. [2013.12.23 23:24:02 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
  431. [2013.12.23 23:24:02 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
  432. [2013.12.23 23:24:02 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
  433. [2013.12.23 23:24:02 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
  434. [2013.12.23 23:24:02 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
  435. [2013.12.23 23:24:02 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
  436. [2013.12.23 23:24:02 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
  437. [2013.12.23 23:24:02 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
  438. [2013.12.23 23:24:02 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
  439. [2013.12.23 23:24:02 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
  440. [2013.12.23 23:24:01 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
  441. [2013.12.23 23:24:01 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
  442. [2013.12.23 23:24:01 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
  443. [2013.12.23 23:24:01 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
  444. [2013.12.23 23:24:00 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
  445. [2013.12.23 23:24:00 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
  446. [2013.12.23 23:24:00 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
  447. [2013.12.23 23:24:00 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
  448. [2013.12.23 23:23:59 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
  449. [2013.12.23 23:23:59 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
  450. [2013.12.23 23:23:59 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
  451. [2013.12.23 23:23:59 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
  452. [2013.12.23 23:23:59 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
  453. [2013.12.23 23:23:59 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
  454. [2013.12.23 23:23:59 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
  455. [2013.12.23 23:23:59 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
  456. [2013.12.23 23:23:59 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
  457. [2013.12.23 23:23:59 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
  458. [2013.12.23 23:23:58 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
  459. [2013.12.23 23:23:58 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
  460. [2013.12.23 23:23:58 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
  461. [2013.12.23 23:23:58 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
  462. [2013.12.23 23:23:57 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
  463. [2013.12.23 23:23:57 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
  464. [2013.12.23 23:23:57 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
  465. [2013.12.23 23:23:57 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
  466. [2013.12.23 23:23:56 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
  467. [2013.12.23 23:23:56 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
  468. [2013.12.23 23:23:56 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
  469. [2013.12.23 23:23:56 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
  470. [2013.12.23 23:23:56 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
  471. [2013.12.23 23:23:56 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
  472. [2013.12.23 23:23:56 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
  473. [2013.12.23 23:23:56 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
  474. [2013.12.23 23:23:55 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
  475. [2013.12.23 23:23:55 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
  476. [2013.12.23 23:23:55 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
  477. [2013.12.23 23:23:55 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
  478. [2013.12.23 23:23:55 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
  479. [2013.12.23 23:23:55 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
  480. [2013.12.23 23:23:54 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
  481. [2013.12.23 23:23:54 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
  482. [2013.12.23 23:23:54 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
  483. [2013.12.23 23:23:54 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
  484. [2013.12.23 23:23:53 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
  485. [2013.12.23 23:23:53 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
  486. [2013.12.23 23:23:52 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
  487. [2013.12.23 23:23:52 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
  488. [2013.12.23 22:58:40 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WoT Social Hub
  489. [2013.12.23 22:58:12 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Local\Overwolf
  490. [2013.12.23 22:53:09 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Local\AVG SafeGuard toolbar
  491. [2013.12.23 22:53:06 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Roaming\MPC-HC
  492. [2013.12.23 22:53:05 | 000,046,368 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
  493. [2013.12.23 22:43:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Overwolf
  494. [2013.12.23 22:43:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Overwolf
  495. [2013.12.23 19:05:37 | 000,035,104 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
  496. [2013.12.23 19:05:36 | 000,026,400 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
  497. [2013.12.23 19:05:36 | 000,021,792 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
  498. [2013.12.23 19:05:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013
  499. [2013.12.23 19:05:32 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Roaming\TuneUp Software
  500. [2013.12.23 19:05:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2013
  501. [2013.12.23 19:05:18 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
  502. [2013.12.23 19:05:14 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
  503. [2013.12.23 19:05:14 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
  504. [2013.12.20 21:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
  505. [2013.12.20 21:50:17 | 000,000,000 | ---D | C] -- C:\rsit
  506. [2013.12.20 21:48:53 | 000,000,000 | ---D | C] -- C:\Qoobox
  507. [2013.12.15 20:16:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
  508. [2013.12.15 20:04:36 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Local\NVIDIA Corporation
  509. [2013.12.15 19:43:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VLC Player GPU+
  510. [2013.12.15 19:43:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Shopping Suggestion
  511. [2013.12.15 10:45:02 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  512. [2013.12.15 10:45:01 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  513. [2013.12.15 10:45:01 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  514. [2013.12.15 10:45:00 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  515. [2013.12.15 10:45:00 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  516. [2013.12.15 10:45:00 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  517. [2013.12.15 10:45:00 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  518. [2013.12.15 10:45:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  519. [2013.12.15 10:45:00 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  520. [2013.12.15 10:44:59 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  521. [2013.12.15 10:44:59 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  522. [2013.12.15 10:44:58 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  523. [2013.12.15 10:44:58 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  524. [2013.12.15 10:44:56 | 001,995,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  525. [2013.12.15 10:44:56 | 001,928,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  526. [2013.12.15 10:44:52 | 005,769,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  527. [2013.12.14 21:16:22 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Local\Purplizer
  528. [2013.12.13 08:54:10 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
  529. [2013.12.13 08:54:09 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
  530. [2013.12.13 08:54:09 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
  531. [2013.12.13 08:54:08 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
  532. [2013.12.13 08:51:03 | 000,000,000 | ---D | C] -- C:\Windows\Migration
  533. [2013.12.13 08:50:35 | 000,028,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEUDINIT.EXE
  534. [2013.12.13 08:47:27 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  535. [2013.12.13 08:47:27 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  536. [2013.12.13 08:47:25 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll
  537. [2013.12.13 08:47:25 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  538. [2013.12.13 08:47:25 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  539. [2013.12.13 08:47:25 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  540. [2013.12.13 08:47:24 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  541. [2013.12.13 08:47:24 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  542. [2013.12.13 08:47:24 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  543. [2013.12.13 08:47:24 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  544. [2013.12.13 08:47:24 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  545. [2013.12.13 08:47:23 | 001,051,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  546. [2013.12.13 08:47:23 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  547. [2013.12.13 08:47:23 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  548. [2013.12.13 08:47:23 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  549. [2013.12.13 08:47:23 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  550. [2013.12.13 08:47:23 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  551. [2013.12.13 08:47:23 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  552. [2013.12.13 08:47:23 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  553. [2013.12.13 08:47:23 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  554. [2013.12.13 08:47:23 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  555. [2013.12.13 08:47:22 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  556. [2013.12.13 08:47:22 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  557. [2013.12.13 08:47:22 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  558. [2013.12.13 08:47:22 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  559. [2013.12.13 08:47:22 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  560. [2013.12.13 08:47:22 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  561. [2013.12.13 08:47:22 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  562. [2013.12.13 08:47:22 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  563. [2013.12.13 08:47:21 | 000,942,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll
  564. [2013.12.13 08:47:21 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  565. [2013.12.13 08:47:21 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  566. [2013.12.13 08:47:21 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  567. [2013.12.13 08:47:21 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  568. [2013.12.13 08:47:21 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  569. [2013.12.13 08:47:21 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  570. [2013.12.13 08:47:20 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  571. [2013.12.13 08:47:20 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  572. [2013.12.13 08:47:20 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  573. [2013.12.13 08:47:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  574. [2013.12.13 08:47:20 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  575. [2013.12.13 08:47:19 | 001,228,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  576. [2013.12.13 08:47:19 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  577. [2013.12.13 08:47:19 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  578. [2013.12.13 08:47:19 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  579. [2013.12.13 08:47:19 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  580. [2013.12.13 08:47:19 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  581. [2013.12.13 08:47:19 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  582. [2013.12.13 08:47:19 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  583. [2013.12.13 08:47:19 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  584. [2013.12.13 08:47:19 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  585. [2013.12.13 08:47:19 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  586. [2013.12.13 08:47:19 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  587. [2013.12.13 08:47:19 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  588. [2013.12.13 08:47:19 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  589. [2013.12.13 08:47:19 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  590. [2013.12.13 08:47:19 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  591. [2013.12.13 08:47:18 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  592. [2013.12.13 08:47:18 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  593. [2013.12.13 08:47:18 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  594. [2013.12.13 08:47:17 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  595. [2013.12.13 08:47:17 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  596. [2013.12.13 08:47:17 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  597. [2013.12.13 08:47:17 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  598. [2013.12.13 08:44:17 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
  599. [2013.12.13 08:44:17 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
  600. [2013.12.13 08:44:13 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
  601. [2013.12.13 08:44:13 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
  602. [2013.12.13 08:44:13 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
  603. [2013.12.13 08:44:13 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
  604. [2013.12.13 08:44:13 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
  605. [2013.12.13 08:44:13 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
  606. [2013.12.13 08:44:13 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
  607. [2013.12.13 08:44:13 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
  608. [2013.12.13 08:44:13 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
  609. [2013.12.13 08:44:11 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
  610. [2013.12.13 08:44:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
  611. [2013.12.10 21:53:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
  612. [2013.12.08 20:10:22 | 000,000,000 | ---D | C] -- C:\Program Files\AskMrRobot
  613. [2013.12.08 20:10:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ask Mr. Robot
  614. [2013.12.07 14:02:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
  615. [2013.12.06 22:08:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 9.2.1 Professional Edition
  616. [2013.12.06 20:53:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GaDaBaMa
  617. [2013.12.06 20:53:48 | 000,000,000 | ---D | C] -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa
  618.  
  619. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  620.  
  621. [2013.12.28 20:39:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1cef37299737d9c.job
  622. [2013.12.28 20:38:10 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
  623. [2013.12.28 20:35:06 | 000,597,478 | ---- | M] () -- C:\Users\Jindřich Žák\Desktop\OTL.rar
  624. [2013.12.28 20:21:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  625. [2013.12.28 19:41:58 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  626. [2013.12.28 19:41:58 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  627. [2013.12.28 19:39:02 | 001,803,018 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  628. [2013.12.28 19:39:02 | 000,750,324 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
  629. [2013.12.28 19:39:02 | 000,727,174 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  630. [2013.12.28 19:39:02 | 000,171,764 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
  631. [2013.12.28 19:39:02 | 000,151,884 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  632. [2013.12.28 19:34:51 | 000,000,960 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  633. [2013.12.28 19:34:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  634. [2013.12.28 19:34:45 | 2110,676,991 | -HS- | M] () -- C:\hiberfil.sys
  635. [2013.12.28 07:08:50 | 000,000,600 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\winscp.rnd
  636. [2013.12.28 07:06:20 | 005,038,676 | ---- | M] () -- C:\Users\Jindřich Žák\Desktop\Sniff28-12-2013-questy.rar
  637. [2013.12.28 01:14:01 | 000,001,877 | ---- | M] () -- C:\Users\Jindřich Žák\Desktop\wowrm.ini
  638. [2013.12.27 23:37:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jindřich Žák\Desktop\OTL.exe
  639. [2013.12.27 22:27:22 | 000,000,600 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Local\PUTTY.RND
  640. [2013.12.27 00:34:36 | 001,778,668 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  641. [2013.12.25 21:00:59 | 004,970,928 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  642. [2013.12.23 23:27:54 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  643. [2013.12.23 23:27:54 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  644. [2013.12.23 22:53:02 | 000,046,368 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
  645. [2013.12.23 19:20:04 | 000,001,342 | -H-- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Deadly Boss Mods Updater.lnk
  646. [2013.12.23 18:57:43 | 000,001,062 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
  647. [2013.12.23 18:57:38 | 000,001,044 | ---- | M] () -- C:\Users\Jindřich Žák\Desktop\Dropbox.lnk
  648. [2013.12.14 21:10:15 | 000,002,200 | -H-- | M] () -- C:\Users\Jindřich Žák\Documents\Default.rdp
  649. [2013.12.13 08:47:27 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  650. [2013.12.13 08:47:27 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  651. [2013.12.13 08:47:25 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll
  652. [2013.12.13 08:47:25 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  653. [2013.12.13 08:47:25 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  654. [2013.12.13 08:47:25 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  655. [2013.12.13 08:47:24 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  656. [2013.12.13 08:47:24 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  657. [2013.12.13 08:47:24 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  658. [2013.12.13 08:47:24 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  659. [2013.12.13 08:47:24 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  660. [2013.12.13 08:47:23 | 001,051,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  661. [2013.12.13 08:47:23 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  662. [2013.12.13 08:47:23 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  663. [2013.12.13 08:47:23 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  664. [2013.12.13 08:47:23 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  665. [2013.12.13 08:47:23 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  666. [2013.12.13 08:47:23 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  667. [2013.12.13 08:47:23 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  668. [2013.12.13 08:47:23 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  669. [2013.12.13 08:47:23 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  670. [2013.12.13 08:47:23 | 000,016,284 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
  671. [2013.12.13 08:47:22 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  672. [2013.12.13 08:47:22 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  673. [2013.12.13 08:47:22 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  674. [2013.12.13 08:47:22 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  675. [2013.12.13 08:47:22 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  676. [2013.12.13 08:47:22 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  677. [2013.12.13 08:47:22 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  678. [2013.12.13 08:47:22 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  679. [2013.12.13 08:47:21 | 000,942,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll
  680. [2013.12.13 08:47:21 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  681. [2013.12.13 08:47:21 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  682. [2013.12.13 08:47:21 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  683. [2013.12.13 08:47:21 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  684. [2013.12.13 08:47:21 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  685. [2013.12.13 08:47:21 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  686. [2013.12.13 08:47:20 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  687. [2013.12.13 08:47:20 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  688. [2013.12.13 08:47:20 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  689. [2013.12.13 08:47:20 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  690. [2013.12.13 08:47:20 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  691. [2013.12.13 08:47:19 | 001,228,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  692. [2013.12.13 08:47:19 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  693. [2013.12.13 08:47:19 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  694. [2013.12.13 08:47:19 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  695. [2013.12.13 08:47:19 | 000,453,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  696. [2013.12.13 08:47:19 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  697. [2013.12.13 08:47:19 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  698. [2013.12.13 08:47:19 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  699. [2013.12.13 08:47:19 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  700. [2013.12.13 08:47:19 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  701. [2013.12.13 08:47:19 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  702. [2013.12.13 08:47:19 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  703. [2013.12.13 08:47:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  704. [2013.12.13 08:47:19 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  705. [2013.12.13 08:47:19 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  706. [2013.12.13 08:47:19 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  707. [2013.12.13 08:47:19 | 000,016,284 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
  708. [2013.12.13 08:47:18 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  709. [2013.12.13 08:47:18 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  710. [2013.12.13 08:47:18 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  711. [2013.12.13 08:47:17 | 000,774,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  712. [2013.12.13 08:47:17 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  713. [2013.12.13 08:47:17 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  714. [2013.12.13 08:47:17 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  715. [2013.12.07 13:28:34 | 000,001,128 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Local\SRDownloader.nast
  716. [2013.12.07 13:25:57 | 000,004,315 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Local\SRDownloader.err
  717. [2013.12.06 02:48:15 | 000,001,395 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\MPQEditor.ini
  718. [2013.12.01 14:10:54 | 000,218,200 | ---- | M] () -- C:\Windows\SysWow64\unrar.dll
  719.  
  720. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  721.  
  722. [2013.12.28 20:35:06 | 000,597,478 | ---- | C] () -- C:\Users\Jindřich Žák\Desktop\OTL.rar
  723. [2013.12.28 07:06:18 | 005,038,676 | ---- | C] () -- C:\Users\Jindřich Žák\Desktop\Sniff28-12-2013-questy.rar
  724. [2013.12.27 23:40:42 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
  725. [2013.12.25 21:00:52 | 004,970,928 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  726. [2013.12.23 22:52:42 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  727. [2013.12.23 19:05:36 | 000,002,217 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
  728. [2013.12.13 08:47:23 | 000,016,284 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
  729. [2013.12.13 08:47:19 | 000,016,284 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
  730. [2013.12.12 05:38:48 | 001,249,280 | ---- | C] () -- C:\Users\Jindřich Žák\Desktop\nej wow servery IDEA.eap
  731. [2013.12.07 18:34:36 | 000,000,952 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1cef37299737d9c.job
  732. [2013.12.06 22:08:46 | 003,316,736 | ---- | C] () -- C:\Windows\SysNative\¸´Ľţ BootMan.exe
  733. [2013.12.06 22:08:46 | 000,016,256 | ---- | C] () -- C:\Windows\SysNative\EuEpmGdi.dll
  734. [2013.12.06 22:08:45 | 003,376,640 | ---- | C] () -- C:\Windows\SysNative\BootMan.exe
  735. [2013.12.06 22:08:45 | 002,468,520 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
  736. [2013.12.06 22:08:45 | 000,100,936 | ---- | C] () -- C:\Windows\SysNative\setupempdrvx64.exe
  737. [2013.12.06 22:08:45 | 000,087,112 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
  738. [2013.12.06 22:08:45 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
  739. [2013.12.06 22:08:45 | 000,017,480 | ---- | C] () -- C:\Windows\SysNative\epmntdrv.sys
  740. [2013.12.06 22:08:45 | 000,014,920 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
  741. [2013.12.06 22:08:45 | 000,009,800 | ---- | C] () -- C:\Windows\SysNative\EuGdiDrv.sys
  742. [2013.12.06 22:08:45 | 000,009,160 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
  743. [2013.12.06 13:20:51 | 000,001,102 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
  744. [2013.10.11 20:11:19 | 001,589,248 | ---- | C] () -- C:\Windows\SysWow64\libmysql_d.dll
  745. [2013.09.23 22:35:39 | 000,234,010 | ---- | C] () -- C:\Windows\SysWow64\poclbm130302GeForce GTX 670MXgv1w256l4.bin
  746. [2013.09.23 22:35:36 | 000,000,000 | ---- | C] () -- C:\Users\Jindřich Žák\regbcm
  747. [2013.09.12 22:02:48 | 000,001,480 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Local\Adobe Uložit pro web 12.0 Prefs
  748. [2013.09.02 21:53:32 | 000,001,395 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Roaming\MPQEditor.ini
  749. [2013.09.02 21:17:50 | 000,012,821 | ---- | C] () -- C:\Users\Jindřich Žák\DesktoptRatings.dbc
  750. [2013.07.18 20:34:11 | 000,004,315 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Local\SRDownloader.err
  751. [2013.06.23 13:31:49 | 000,647,168 | ---- | C] () -- C:\Windows\AutoKMS.exe
  752. [2013.05.28 19:24:04 | 000,000,758 | ---- | C] () -- C:\Users\Jindřich Žák\_viminfo
  753. [2013.05.23 21:02:36 | 000,000,017 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Local\resmon.resmoncfg
  754. [2013.05.22 17:50:26 | 000,001,128 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Local\SRDownloader.nast
  755. [2013.05.22 16:18:03 | 000,000,600 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Local\PUTTY.RND
  756. [2013.05.22 16:11:22 | 000,000,497 | ---- | C] () -- C:\Users\Jindřich Žák\.gitconfig
  757. [2013.05.22 15:26:44 | 000,011,179 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Roaming\SmarThruOptions.xml
  758. [2013.05.22 15:26:34 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\SvcMan.exe
  759. [2013.05.22 15:26:31 | 000,172,032 | ---- | C] () -- C:\Windows\SysWow64\SecSNMP.dll
  760. [2013.05.22 15:26:28 | 000,000,136 | ---- | C] () -- C:\Windows\Readiris.ini
  761. [2013.05.22 15:26:27 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\irisco32.dll
  762. [2013.05.21 21:29:05 | 001,778,668 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  763. [2013.05.21 17:16:14 | 000,000,184 | ---- | C] () -- C:\Windows\AutoKMS.ini
  764. [2013.05.21 16:34:52 | 000,000,600 | ---- | C] () -- C:\Users\Jindřich Žák\AppData\Roaming\winscp.rnd
  765. [2012.04.20 12:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  766.  
  767. [color=#E56717]========== ZeroAccess Check ==========[/color]
  768.  
  769. [2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  770.  
  771. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  772.  
  773. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  774.  
  775. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  776.  
  777. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  778.  
  779. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  780. "" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
  781. "ThreadingModel" = Apartment
  782.  
  783. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  784. "" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  785. "ThreadingModel" = Apartment
  786.  
  787. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  788. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  789. "ThreadingModel" = Free
  790.  
  791. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  792. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  793. "ThreadingModel" = Free
  794.  
  795. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  796. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  797. "ThreadingModel" = Both
  798.  
  799. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  800.  
  801. [color=#E56717]========== LOP Check ==========[/color]
  802.  
  803. [2013.05.27 14:59:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Acronis
  804. [2013.08.28 21:26:57 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Battle.net
  805. [2013.12.27 00:57:16 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer
  806. [2013.05.22 14:39:50 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer Pro
  807. [2013.09.12 21:59:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
  808. [2013.10.31 20:43:29 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\DeadlyBossModsUpdater
  809. [2013.12.28 19:38:00 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox
  810. [2013.06.23 10:52:51 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\EPSON
  811. [2013.05.21 15:15:53 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ESET
  812. [2013.12.06 20:56:24 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa
  813. [2013.11.22 17:12:51 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GHISLER
  814. [2013.05.22 16:11:15 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GitExtensions
  815. [2013.05.22 19:41:57 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ICQ-Profile
  816. [2013.05.22 19:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ICQM
  817. [2013.08.30 12:15:36 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Mikrotik
  818. [2013.10.10 10:06:16 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Moxzbot
  819. [2013.12.23 22:53:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\MPC-HC
  820. [2013.12.23 18:49:31 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Notepad++
  821. [2013.11.26 21:36:13 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Seznam.cz
  822. [2013.05.22 15:26:45 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\SmarThru4
  823. [2013.08.30 11:27:42 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\SplitMediaLabs
  824. [2013.06.05 19:16:28 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TeamViewer
  825. [2013.05.21 21:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Thunderbird
  826. [2013.11.09 00:09:01 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TS3Client
  827. [2013.12.23 19:05:32 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TuneUp Software
  828. [2013.12.27 00:00:10 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\uTorrent
  829. [2013.12.07 17:00:10 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\XBMC
  830.  
  831. [color=#E56717]========== Purity Check ==========[/color]
  832.  
  833.  
  834.  
  835. [color=#E56717]========== Custom Scans ==========[/color]
  836.  
  837. [color=#A23BEC]< >[/color]
  838. [2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
  839. [2009.07.14 06:08:49 | 000,029,962 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  840. [2013.05.20 15:02:43 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
  841. [2013.05.21 15:10:51 | 000,000,960 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  842. [2013.12.07 18:34:36 | 000,000,952 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef37299737d9c.job
  843.  
  844. [color=#A23BEC]< >[/color]
  845.  
  846. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  847. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
  848. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
  849. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
  850. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
  851. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
  852. [2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys
  853.  
  854. [color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
  855. [2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
  856. [2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
  857. [2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
  858. [2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
  859.  
  860. [color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
  861. [2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
  862. [2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
  863. [2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys
  864.  
  865. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  866. [2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  867. [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
  868. [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  869. [2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  870. [2010.11.21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  871. [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
  872. [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  873. [2010.11.21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  874.  
  875. [color=#A23BEC]< MD5 for: HAL.DLL >[/color]
  876. [2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
  877. [2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll
  878.  
  879. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  880. [2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
  881. [2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
  882. [2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
  883. [2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
  884.  
  885. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  886. [2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
  887. [2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
  888.  
  889. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  890. [2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  891. [2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  892. [2013.04.04 13:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
  893. [2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  894. [2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  895.  
  896. [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
  897. [2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
  898. [2013.05.08 07:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
  899. [2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SysNative\drivers\tcpip.sys
  900. [2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
  901. [2010.11.21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
  902. [2013.09.07 03:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
  903. [2013.05.08 07:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
  904. [2013.07.06 06:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
  905. [2013.01.03 07:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
  906. [2013.01.04 06:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
  907. [2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
  908. [2013.07.06 07:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
  909.  
  910. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  911. [2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
  912. [2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  913. [2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
  914. [2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  915.  
  916. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  917. [2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
  918. [2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  919. [2013.04.04 13:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  920.  
  921. [color=#A23BEC]< >[/color]
  922.  
  923. [color=#A23BEC]< %systemroot%*.* /U /s >[/color]
  924. [5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  925. [12 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  926. [5 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
  927.  
  928. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  929.  
  930. [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
  931.  
  932. [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
  933.  
  934. [color=#A23BEC]< %APPDATA%\*. >[/color]
  935. [2013.05.27 14:59:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Acronis
  936. [2013.09.12 22:01:54 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Adobe
  937. [2013.08.28 21:26:57 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Battle.net
  938. [2013.12.27 00:57:16 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer
  939. [2013.05.22 14:39:50 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer Pro
  940. [2013.09.12 21:59:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
  941. [2013.10.31 20:43:29 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\DeadlyBossModsUpdater
  942. [2013.12.28 19:38:00 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox
  943. [2013.06.23 10:52:51 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\EPSON
  944. [2013.05.21 15:15:53 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ESET
  945. [2013.12.06 20:56:24 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa
  946. [2013.11.22 17:12:51 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GHISLER
  947. [2013.05.22 16:11:15 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\GitExtensions
  948. [2013.05.22 19:41:57 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ICQ-Profile
  949. [2013.05.22 19:39:31 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\ICQM
  950. [2013.05.20 22:49:17 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Identities
  951. [2013.05.20 15:39:05 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\InstallShield
  952. [2013.05.20 15:02:46 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Macromedia
  953. [2013.05.22 17:16:03 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Malwarebytes
  954. [2011.04.12 09:45:27 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Media Center Programs
  955. [2013.09.09 19:41:31 | 000,000,000 | --SD | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Microsoft
  956. [2013.05.22 16:48:49 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Microsoft FxCop
  957. [2013.08.30 12:15:36 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Mikrotik
  958. [2013.10.10 10:06:16 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Moxzbot
  959. [2013.05.21 21:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Mozilla
  960. [2013.12.23 22:53:06 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\MPC-HC
  961. [2013.06.21 13:48:26 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Nero
  962. [2013.12.23 18:49:31 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Notepad++
  963. [2013.09.23 22:35:38 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\NVIDIA
  964. [2013.11.26 21:36:13 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Seznam.cz
  965. [2013.12.28 20:34:52 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Skype
  966. [2013.05.22 15:26:45 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\SmarThru4
  967. [2013.08.30 11:27:42 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\SplitMediaLabs
  968. [2013.06.05 19:16:28 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TeamViewer
  969. [2013.05.21 21:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\Thunderbird
  970. [2013.11.09 00:09:01 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TS3Client
  971. [2013.12.23 19:05:32 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\TuneUp Software
  972. [2013.12.27 00:00:10 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\uTorrent
  973. [2013.05.21 15:51:48 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\WinRAR
  974. [2013.12.07 17:00:10 | 000,000,000 | ---D | M] -- C:\Users\Jindřich Žák\AppData\Roaming\XBMC
  975.  
  976. [color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
  977. [2009.08.11 21:21:26 | 000,087,552 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
  978. [2009.08.11 21:21:30 | 000,090,112 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
  979. [2010.03.22 14:52:04 | 000,697,690 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
  980. [2012.10.11 09:01:20 | 001,175,371 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\FFDShow\unins000.exe
  981. [2010.08.14 10:42:54 | 000,113,152 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
  982. [2010.08.14 10:45:10 | 000,358,400 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
  983. [2010.08.14 10:42:06 | 000,137,728 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
  984. [2010.09.30 15:30:22 | 000,042,305 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
  985. [2013.12.18 02:02:36 | 030,714,312 | ---- | M] (Dropbox, Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\Dropbox.exe
  986. [2013.12.18 02:04:14 | 000,229,288 | ---- | M] (Dropbox, Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
  987. [2013.05.17 15:55:42 | 000,919,024 | ---- | M] (Dropbox, Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
  988. [2013.12.06 20:55:28 | 185,117,816 | ---- | M] (Microsoft Corporation) -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\AccessRuntime.exe
  989. [2010.08.01 12:04:40 | 000,494,080 | ---- | M] (Irfan Skiljan) -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\i_view32.exe
  990. [2007.11.27 18:02:00 | 001,048,576 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\nvdxt.exe
  991. [2013.12.06 20:54:52 | 000,870,205 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\unins000.exe
  992. [2011.12.14 23:19:52 | 000,256,000 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\X360PkgTool.exe
  993. [2012.09.03 23:18:12 | 000,488,960 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\GaDaBaMa\Samba\sqlite3.exe
  994. [2013.05.22 19:39:29 | 027,598,184 | ---- | M] (ICQ) -- C:\Users\Jindřich Žák\AppData\Roaming\ICQM\icq.exe
  995. [2013.05.22 19:39:32 | 033,654,608 | ---- | M] (ICQ) -- C:\Users\Jindřich Žák\AppData\Roaming\ICQM\icqsetup.exe
  996. [2013.05.22 19:39:31 | 004,739,616 | ---- | M] () -- C:\Users\Jindřich Žák\AppData\Roaming\ICQM\ICQ\dll\mailrusputnik.exe
  997. [2013.10.31 20:42:58 | 000,054,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
  998. [2013.05.21 17:37:31 | 000,802,136 | ---- | M] (BitTorrent Inc.) -- C:\Users\Jindřich Žák\AppData\Roaming\uTorrent\uTorrent.exe
  999. [1 C:\Users\Jindřich Žák\AppData\Roaming\uTorrent\*.tmp files -> C:\Users\Jindřich Žák\AppData\Roaming\uTorrent\*.tmp -> ]
  1000.  
  1001. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  1002.  
  1003. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1004.  
  1005. [color=#A23BEC]< %systemroot%\Tasks\*.job >[/color]
  1006. [2013.12.28 20:21:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
  1007. [2013.12.28 19:34:51 | 000,000,960 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  1008. [2013.12.28 20:39:00 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef37299737d9c.job
  1009.  
  1010. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  1011.  
  1012. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  1013.  
  1014. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  1015.  
  1016. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /3 >[/color]
  1017.  
  1018. [color=#A23BEC]< %systemroot%\system32\*.* /3 >[/color]
  1019. [2013.12.28 19:36:53 | 000,000,018 | ---- | M] () -- C:\Windows\system32\log.txt
  1020. [2013.12.27 00:34:36 | 001,778,668 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
  1021.  
  1022. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  1023.  
  1024. [color=#A23BEC]< >[/color]
  1025.  
  1026. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >[/color]
  1027. "Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.21 04:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
  1028. "Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.11.14 16:42:42 | 020,584,608 | R--- | M] (Skype Technologies S.A.)
  1029.  
  1030. [color=#A23BEC]< >[/color]
  1031.  
  1032. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >[/color]
  1033.  
  1034. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >[/color]
  1035. [2013.12.13 08:47:25 | 000,806,096 | ---- | M] (Microsoft Corporation) MD5=C8A8321292A459B0A17FB39A782A5C74 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  1036.  
  1037. [color=#A23BEC]< %PROGRAMFILES%\Opera\opera.exe /md5 >[/color]
  1038.  
  1039. [color=#A23BEC]< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >[/color]
  1040. [2013.12.04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) MD5=376A9B411BF8B77D5BF84B24D0C7DACD -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  1041.  
  1042. [color=#A23BEC]< >[/color]
  1043.  
  1044. [color=#A23BEC]< %SystemDrive%\PhysicalMBR.bin /md5 >[/color]
  1045. [2013.12.28 20:38:10 | 000,000,512 | ---- | M] () MD5=2E353735F7BD0FCC00915483477C1F56 -- C:\PhysicalMBR.bin
  1046.  
  1047. [color=#A23BEC]< >[/color]
  1048.  
  1049. [color=#A23BEC]< *crack* /s >[/color]
  1050. [2012.03.30 23:24:54 | 000,003,556 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\Content\Reference\PHP\CrackF.html
  1051. [2013.09.25 20:09:27 | 000,005,974 | ---- | M] () -- \Users\Jindřich Žák\AppData\Roaming\uTorrent\UltraISO PE 9.5.3.2901 With Crack Free By [TotalFreeSofts].torrent
  1052. [1 \Users\Jindřich Žák\AppData\Roaming\uTorrent\*.tmp files -> \Users\Jindřich Žák\AppData\Roaming\uTorrent\*.tmp -> ]
  1053.  
  1054. [color=#A23BEC]< *keygen* /s >[/color]
  1055. [2010.04.30 21:37:50 | 000,063,877 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS5\keygen.exe
  1056. [2012.03.30 23:24:44 | 000,013,367 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\Content\Reference\HTML\KEYGEN.html
  1057. [2012.03.30 23:26:56 | 000,009,211 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\TagLibraries\HTML\keygen.vtm
  1058. [2013.09.08 15:52:58 | 027,828,826 | ---- | M] () -- \Program Files (x86)\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999.rar
  1059. [2013.05.22 16:15:48 | 000,109,056 | ---- | M] () -- \Program Files (x86)\Git\bin\ssh-keygen.exe
  1060. [2013.09.23 22:35:19 | 000,001,565 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999.lnk
  1061. [2013.09.23 22:35:19 | 000,001,565 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999\Avg TuneUP Utilities 2013-CZ + Keygen BY VZ(DUCH)1999.lnk
  1062.  
  1063. [color=#A23BEC]< *loader* /s >[/color]
  1064. [2013.12.23 22:53:00 | 000,004,178 | ---- | M] () -- \AdwCleaner\Quarantine\C\Program Files (x86)\AVG SafeGuard toolbar\Chrome\content\icons\loader.gif.vir
  1065. [2013.12.23 22:53:00 | 000,019,497 | ---- | M] () -- \AdwCleaner\Quarantine\C\Program Files (x86)\AVG SafeGuard toolbar\UninstallRes\ClientPackage\Images\uninstall\loader.gif.vir
  1066. [2013.12.23 22:53:00 | 000,006,494 | ---- | M] () -- \AdwCleaner\Quarantine\C\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.2.0.38\modules\skin\ajax-loader.gif.vir
  1067. [2013.12.23 22:53:00 | 000,000,729 | ---- | M] () -- \AdwCleaner\Quarantine\C\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.2.0.38\modules\skin\loader.gif.vir
  1068. [2011.03.02 20:35:42 | 005,299,048 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\Photodownloader.exe
  1069. [2011.03.02 17:57:10 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\bitmaps\main_window\C_LoadError.png
  1070. [2011.03.02 17:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\da_dk\Photodownloader.ini
  1071. [2011.03.02 17:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\de_de\Photodownloader.ini
  1072. [2011.03.02 17:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\en_us\Photodownloader.ini
  1073. [2011.03.02 17:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\es_es\Photodownloader.ini
  1074. [2011.03.02 17:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fi_fi\Photodownloader.ini
  1075. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fr_fr\Photodownloader.ini
  1076. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\it_it\Photodownloader.ini
  1077. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ja_jp\Photodownloader.ini
  1078. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ko_kr\Photodownloader.ini
  1079. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\nl_nl\Photodownloader.ini
  1080. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\no_no\Photodownloader.ini
  1081. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\pt_br\Photodownloader.ini
  1082. [2011.03.02 17:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\sv_se\Photodownloader.ini
  1083. [2011.03.02 17:57:14 | 000,000,308 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_cn\Photodownloader.ini
  1084. [2011.03.02 17:57:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_tw\Photodownloader.ini
  1085. [2012.03.30 23:26:14 | 000,000,454 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\PhoneGapBuildPlugin\res\loader.htm
  1086. [2012.03.30 23:26:42 | 000,037,112 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\Shared\MM\Media\FLVLoader.swf
  1087. [2012.03.30 23:27:02 | 000,000,366 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\configuration\Third Party Source Code\jquery-mobile\images\ajax-loader.png
  1088. [2012.03.30 10:57:02 | 000,000,366 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Dreamweaver CS6\cs_CZ\Configuration\Third Party Source Code\jquery-mobile\images\ajax-loader.png
  1089. [2010.03.18 22:21:56 | 000,063,312 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.dll
  1090. [2010.03.17 23:17:14 | 000,004,096 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.tlb
  1091. [2012.12.06 22:38:40 | 000,268,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
  1092. [2012.12.06 22:38:40 | 000,019,000 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
  1093. [2006.01.02 09:10:42 | 000,049,152 | ---- | M] () -- \Program Files (x86)\Futuremark\3DMark06\PhysXLoader.dll
  1094. [2010.09.17 17:33:36 | 000,011,436 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\AutoLoader.pm
  1095. [2010.09.17 17:33:36 | 000,012,953 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\SelfLoader.pm
  1096. [2009.02.28 09:58:38 | 000,001,277 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\Locale\Maketext\GutsLoader.pm
  1097. [2010.09.17 17:33:36 | 000,000,727 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\msys\ByteLoader.pm
  1098. [2010.09.17 17:33:36 | 000,028,961 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\msys\DynaLoader.pm
  1099. [2010.09.17 17:33:36 | 000,010,818 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\msys\XSLoader.pm
  1100. [2010.09.17 17:33:36 | 000,000,000 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\msys\auto\ByteLoader\ByteLoader.bs
  1101. [2010.09.17 17:33:36 | 000,021,504 | ---- | M] () -- \Program Files (x86)\Git\lib\perl5\5.8.8\msys\auto\ByteLoader\ByteLoader.dll
  1102. [2009.07.22 09:17:52 | 000,019,992 | ---- | M] () -- \Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\SqlResourceLoader.dll
  1103. [2010.03.18 22:21:56 | 000,063,312 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.dll
  1104. [2010.03.18 00:57:18 | 000,001,373 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.dll.manifest
  1105. [2010.03.17 23:17:14 | 000,004,096 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.tlb
  1106. [2009.08.31 03:51:22 | 000,001,648 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 10.0\VC\atlmfc\include\afxribboninfoloader.h
  1107. [2009.08.31 03:51:22 | 000,004,525 | ---- | M] () -- \Program Files (x86)\Microsoft Visual Studio 10.0\VC\atlmfc\src\mfc\afxribboninfoloader.cpp
  1108. [2011.07.18 22:33:32 | 000,008,787 | ---- | M] () -- \Program Files (x86)\Notepad++\user.manual\sites\all\modules\fancy_login\images\ajax-loader.gif
  1109. [2013.06.04 09:57:24 | 000,057,224 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
  1110. [2013.06.04 09:57:24 | 000,065,416 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
  1111. [2013.06.04 09:57:24 | 000,083,848 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
  1112. [2013.06.04 09:57:24 | 000,088,968 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
  1113. [2013.12.09 12:08:12 | 000,001,657 | ---- | M] () -- \Program Files (x86)\Overwolf\Licenses\TextureLoader.txt
  1114. [2013.02.19 11:07:28 | 000,030,608 | ---- | M] () -- \Program Files (x86)\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
  1115. [2009.09.03 07:23:38 | 000,114,688 | ---- | M] () -- \Program Files (x86)\SmarThru 4\WebUploaderLib.dll
  1116. [2009.09.03 07:17:16 | 000,000,200 | ---- | M] () -- \Program Files (x86)\SmarThru 4\English\SmarThruRes-WebUploaderLib.xml
  1117. [2009.09.03 07:17:18 | 000,000,190 | ---- | M] () -- \Program Files (x86)\SmarThru 4\French\SmarThruRes-WebUploaderLib.xml
  1118. [2009.09.03 07:17:20 | 000,000,196 | ---- | M] () -- \Program Files (x86)\SmarThru 4\German\SmarThruRes-WebUploaderLib.xml
  1119. [2009.09.03 07:17:38 | 000,000,203 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Hungarian\SmarThruRes-WebUploaderLib.xml
  1120. [2009.09.03 07:17:36 | 000,000,184 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Chinese (Traditional)\SmarThruRes-WebUploaderLib.xml
  1121. [2009.09.03 07:17:12 | 000,000,178 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Chinese\SmarThruRes-WebUploaderLib.xml
  1122. [2009.09.03 07:17:22 | 000,000,194 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Italian\SmarThruRes-WebUploaderLib.xml
  1123. [2009.09.03 07:17:24 | 000,000,191 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Korean\SmarThruRes-WebUploaderLib.xml
  1124. [2009.09.03 07:17:40 | 000,000,194 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Polish\SmarThruRes-WebUploaderLib.xml
  1125. [2009.09.03 07:17:30 | 000,000,190 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Portuguese (Brazilian)\SmarThruRes-WebUploaderLib.xml
  1126. [2009.09.03 07:17:32 | 000,000,192 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Portuguese\SmarThruRes-WebUploaderLib.xml
  1127. [2009.09.03 07:17:26 | 000,000,200 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Russian\SmarThruRes-WebUploaderLib.xml
  1128. [2009.09.03 07:17:28 | 000,000,193 | ---- | M] () -- \Program Files (x86)\SmarThru 4\Spanish\SmarThruRes-WebUploaderLib.xml
  1129. [2010.12.17 18:09:54 | 000,004,782 | ---- | M] () -- \Program Files (x86)\XBMC\addons\webinterface.default\images\ajax-loader.gif
  1130. [2012.12.06 22:38:40 | 000,364,088 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
  1131. [2012.12.06 22:38:40 | 000,019,000 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
  1132. [2009.07.22 09:17:50 | 000,027,672 | ---- | M] () -- \Program Files\Microsoft SQL Server\100\Tools\Binn\SqlResourceLoader.dll
  1133. [2009.07.22 09:17:50 | 000,027,672 | ---- | M] () -- \Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SqlResourceLoader.dll
  1134. [2013.05.16 15:41:22 | 001,152,288 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{F918F83B-B66B-4653-9972-F6F15D51E144}\ExtensionLoader.dll
  1135. [2010.03.15 10:27:20 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
  1136. [2011.11.17 14:50:34 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
  1137. [2013.03.26 13:13:12 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
  1138. [2013.03.26 13:13:12 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
  1139. [2013.10.09 17:07:12 | 000,006,012 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_15fps.gif
  1140. [2013.10.09 17:07:12 | 000,021,956 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\normal\loader_30fps.gif
  1141. [2013.03.26 13:13:12 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\[email protected]
  1142. [2011.11.17 14:50:34 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero 10\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
  1143. [2013.03.26 13:13:12 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
  1144. [2013.03.26 13:13:12 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
  1145. [2013.10.09 17:07:12 | 000,006,012 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_15fps.gif
  1146. [2013.10.09 17:07:12 | 000,021,956 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\normal\loader_30fps.gif
  1147. [2013.03.26 13:13:12 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\[email protected]
  1148. [2013.12.07 13:25:57 | 000,004,315 | ---- | M] () -- \Users\Jindřich Žák\AppData\Local\SRDownloader.err
  1149. [2013.12.07 13:28:34 | 000,001,128 | ---- | M] () -- \Users\Jindřich Žák\AppData\Local\SRDownloader.nast
  1150. [2013.12.27 23:24:24 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\skin\ajax-loader.gif
  1151. [2013.12.27 00:32:38 | 000,110,991 | ---- | M] () -- \Users\Jindřich Žák\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F9DH0WPZ\AdLoader-7b857a7be889bd57f92da60a9b6146bb.min[1].js
  1152. [2013.12.27 00:32:38 | 000,001,537 | ---- | M] () -- \Users\Jindřich Žák\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IMZCOH9F\AdLoader[1].htm
  1153. [2010.01.24 11:26:38 | 000,001,065 | ---- | M] () -- \Users\Jindřich Žák\AppData\Roaming\Thunderbird\Profiles\xupzc2ha.default\extensions\{de1b245c-de57-11da-ba2d-0050c2490048}\components\loader.js
  1154. [2013.07.18 20:32:34 | 000,905,728 | ---- | M] () -- \Users\Jindřich Žák\Desktop\ikony plochy\SRDownloader.exe
  1155. [2012.04.17 12:36:25 | 000,001,849 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\galleria\themes\classic\classic-loader.gif
  1156. [2012.04.17 12:36:48 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\prettyphoto\images\prettyphoto\dark_rounded\loader.gif
  1157. [2012.04.17 12:36:49 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\prettyphoto\images\prettyphoto\dark_square\loader.gif
  1158. [2012.04.17 12:36:50 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\prettyphoto\images\prettyphoto\facebook\loader.gif
  1159. [2012.04.17 12:36:51 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\prettyphoto\images\prettyphoto\light_rounded\loader.gif
  1160. [2012.04.17 12:36:52 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Desktop\www-soho-zaloha\js\prettyphoto\images\prettyphoto\light_square\loader.gif
  1161. [2013.06.01 23:47:19 | 000,006,820 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\character\achievement\ajax-loader.gif
  1162. [2013.06.01 23:47:39 | 000,000,673 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\arena-loader.gif
  1163. [2013.06.01 23:47:39 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\canvas-loader-bright.gif
  1164. [2013.06.01 23:47:39 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\canvas-loader.gif
  1165. [2013.06.01 23:47:39 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\canvas-loader.gif.old
  1166. [2013.06.01 23:47:39 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\loader.gif
  1167. [2013.06.01 23:47:39 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\test\wow\static\images\loaders\thumbnail-loader.gif
  1168. [2013.06.01 23:47:52 | 000,006,820 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\character\achievement\ajax-loader.gif
  1169. [2013.06.01 23:48:12 | 000,000,673 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\arena-loader.gif
  1170. [2013.06.01 23:48:13 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\canvas-loader-bright.gif
  1171. [2013.06.01 23:48:13 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\canvas-loader.gif
  1172. [2013.06.01 23:48:13 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\canvas-loader.gif.old
  1173. [2013.06.01 23:48:13 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\loader.gif
  1174. [2013.06.01 23:48:13 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Documents\test2\wow\static\images\loaders\thumbnail-loader.gif
  1175. [2013.05.31 10:48:44 | 000,006,820 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\character\achievement\ajax-loader.gif
  1176. [2013.05.31 10:48:44 | 000,000,673 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\arena-loader.gif
  1177. [2013.05.31 10:48:44 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\canvas-loader-bright.gif
  1178. [2013.05.31 19:39:00 | 000,002,977 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\canvas-loader.gif
  1179. [2013.05.31 10:48:44 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\canvas-loader.gif.old
  1180. [2013.05.31 10:48:44 | 000,003,208 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\loader.gif
  1181. [2013.05.31 10:48:44 | 000,002,545 | ---- | M] () -- \Users\Jindřich Žák\Documents\Web bez názvu 2\wow\static\images\loaders\thumbnail-loader.gif
  1182. [2010.03.24 19:35:48 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004119110000000100000000F01FEC\14.0.4763\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
  1183. [2010.10.06 20:36:40 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\067DF0BC6C6C6FA3DA81EFB3B38727D7\10.0.31010\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8
  1184. [2010.10.06 20:36:40 | 000,018,264 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\067DF0BC6C6C6FA3DA81EFB3B38727D7\10.0.31010\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8
  1185. [2010.10.06 20:36:40 | 000,387,408 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\067DF0BC6C6C6FA3DA81EFB3B38727D7\10.0.31010\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8
  1186. [2010.10.06 20:36:40 | 000,265,552 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\067DF0BC6C6C6FA3DA81EFB3B38727D7\10.0.31010\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8
  1187. [2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
  1188. [2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
  1189. [2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  1190. [2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
  1191. [2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
  1192. [2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
  1193. [2012.10.04 18:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
  1194. [2012.11.30 06:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
  1195. [2013.08.02 03:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
  1196. [2012.10.04 18:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
  1197. [2012.11.30 06:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
  1198. [2013.01.04 06:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
  1199. [2013.08.02 07:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
  1200. [2013.08.29 03:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
  1201. [2011.04.12 09:34:35 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
  1202. [2011.04.12 09:34:35 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
  1203. [2011.04.12 09:34:35 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
  1204. [2011.04.12 09:34:35 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
  1205. [2011.04.12 09:34:35 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
  1206. [2013.05.21 15:22:41 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
  1207. [2013.05.21 15:22:41 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
  1208. [2013.05.21 15:22:41 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
  1209. [2013.05.21 15:22:41 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
  1210. [2013.05.21 15:22:41 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
  1211. [2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
  1212. [2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
  1213. [2011.04.12 09:33:23 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
  1214. [2010.11.21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
  1215. [2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
  1216. [2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
  1217. [2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
  1218. [2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
  1219. [2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
  1220. [2012.10.04 17:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
  1221. [2012.11.30 05:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
  1222. [2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
  1223. [2012.10.04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
  1224. [2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
  1225. [2013.01.04 05:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
  1226. [2013.08.02 06:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
  1227. [2013.08.29 02:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
  1228. [2013.03.08 20:05:28 | 000,000,381 | ---- | M] () -- \WOW Pandaria\World of Warcraft\Interface\AddOns\Prat-3.0\pullouts\Prat-3.0_Loader\Prat-3.0_Loader.toc
  1229.  
  1230. [color=#E56717]========== Alternate Data Streams ==========[/color]
  1231.  
  1232. @Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
  1233.  
  1234. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!