OTL logfile created on: 2013-08-30 11:57:54 AM - Run 5
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Krasimira\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: yyyy-MM-dd
 
7.87 Gb Total Physical Memory | 6.98 Gb Available Physical Memory | 88.68% Memory free
9.06 Gb Paging File | 8.28 Gb Available in Paging File | 91.41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive D: | 25.00 Gb Total Space | 21.86 Gb Free Space | 87.43% Space Free | Partition Type: NTFS
 
Computer Name: KRASI | User Name: Krasimira | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 180 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Users\Krasimira\Desktop\OTL.exe (OldTimer Tools)
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - (DsmSvc) -- C:\windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:[b]64bit:[/b] - (netprofm) -- C:\windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (BrokerInfrastructure) -- C:\windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AudioEndpointBuilder) -- C:\windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (ESET)
SRV:[b]64bit:[/b] - (TimeBroker) -- C:\windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (SystemEventsBroker) -- C:\windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (wlidsvc) -- C:\windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (LSM) -- C:\windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (PrintNotify) -- C:\windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WSService) -- C:\windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (fhsvc) -- C:\windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WiaRpc) -- C:\windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Wcmsvc) -- C:\windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (VaultSvc) -- C:\windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (svsvc) -- C:\windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Netlogon) -- C:\windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NcaSvc) -- C:\windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NcdAutoSetup) -- C:\windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (KeyIso) -- C:\windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (EFS) -- C:\windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DeviceAssociationService) -- C:\windows\SysNative\das.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AllUserInstallAgent) -- C:\windows\SysNative\AUInstallAgent.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicvss) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmictimesync) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicshutdown) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicrdv) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmickvpexchange) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicheartbeat) -- C:\windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (CxAudMsg) -- C:\windows\SysNative\CxAudMsg64.exe (Conexant Systems Inc.)
SRV:[b]64bit:[/b] - (Intel(R) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (mi-raysat_3dsmax2013_64) -- C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe ()
SRV:[b]64bit:[/b] - (BITCOMET_HELPER_SERVICE) -- C:\Program Files\BitComet\tools\BitCometService.exe (www.BitComet.com)
SRV:[b]64bit:[/b] - (lxdx_device) -- C:\windows\SysNative\lxdxcoms.exe ( )
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (RealNetworks Downloader Resolver Service) -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (MBAMService) -- D:\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- D:\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (cphs) -- C:\windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Qualcomm Atheros Commnucations)
SRV - (ZAtheros Bt and Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
SRV - (PrintNotify) -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (Autodesk Content Service) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Autodesk, Inc.)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - (sdbus) -- C:\windows\SysNative\Drivers\sdbus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (USBXHCI) -- C:\windows\SysNative\Drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UCX01000) -- C:\windows\SysNative\Drivers\UCX01000.SYS (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BthAvrcpTg) -- C:\windows\SysNative\Drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (hidi2c) -- C:\windows\SysNative\Drivers\hidi2c.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (LHDmgr) -- C:\windows\SysNative\Drivers\LhdX64.sys (Lenovo.)
DRV:[b]64bit:[/b] - (ACPIVPC) -- C:\windows\SysNative\Drivers\AcpiVpc.sys (Lenovo Corporation)
DRV:[b]64bit:[/b] - (USBHUB3) -- C:\windows\SysNative\Drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:[b]64bit:[/b] - (spaceport) -- C:\windows\SysNative\Drivers\spaceport.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (MBAMProtector) -- C:\windows\SysNative\Drivers\mbam.sys (Malwarebytes Corporation)
DRV:[b]64bit:[/b] - (storahci) -- C:\windows\SysNative\Drivers\storahci.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TPM) -- C:\windows\SysNative\Drivers\tpm.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (pdc) -- C:\windows\SysNative\Drivers\pdc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (epfwwfp) -- C:\windows\SysNative\Drivers\epfwwfp.sys (ESET)
DRV:[b]64bit:[/b] - (eamonm) -- C:\windows\SysNative\Drivers\eamonm.sys (ESET)
DRV:[b]64bit:[/b] - (igfx) -- C:\windows\SysNative\Drivers\igdkmd64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (WdBoot) -- C:\windows\SysNative\Drivers\WdBoot.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WdFilter) -- C:\windows\SysNative\Drivers\WdFilter.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BtFilter) -- C:\windows\SysNative\Drivers\btfilter.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (BTATH_RCP) -- C:\windows\SysNative\Drivers\btath_rcp.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (BTATH_LWFLT) -- C:\windows\SysNative\Drivers\btath_lwflt.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (BTATH_A2DP) -- C:\windows\SysNative\Drivers\btath_a2dp.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (BTATH_HCRP) -- C:\windows\SysNative\Drivers\btath_hcrp.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (btath_avdt) -- C:\windows\SysNative\Drivers\btath_avdt.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (AthBTPort) -- C:\windows\SysNative\Drivers\btath_flt.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (BTATH_BUS) -- C:\windows\SysNative\Drivers\btath_bus.sys (Qualcomm Atheros)
DRV:[b]64bit:[/b] - (epfw) -- C:\windows\SysNative\Drivers\epfw.sys (ESET)
DRV:[b]64bit:[/b] - (EpfwLWF) -- C:\windows\SysNative\Drivers\EpfwLWF.sys (ESET)
DRV:[b]64bit:[/b] - (ehdrv) -- C:\windows\SysNative\Drivers\ehdrv.sys (ESET)
DRV:[b]64bit:[/b] - (msgpiowin32) -- C:\windows\SysNative\Drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (bthhfhid) -- C:\windows\SysNative\Drivers\BthhfHid.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (FxPPM) -- C:\windows\SysNative\Drivers\fxppm.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\windows\SysNative\Drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (sdstor) -- C:\windows\SysNative\Drivers\sdstor.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dam) -- C:\windows\SysNative\Drivers\dam.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (GPIOClx0101) -- C:\windows\SysNative\Drivers\msgpioclx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ebdrv) -- C:\windows\SysNative\Drivers\evbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b06bdrv) -- C:\windows\SysNative\Drivers\bxvbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (athr) -- C:\windows\SysNative\Drivers\athw8x.sys (Qualcomm Atheros Communications, Inc.)
DRV:[b]64bit:[/b] - (iaStorA) -- C:\windows\SysNative\Drivers\iaStorA.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (SynTP) -- C:\windows\SysNative\Drivers\SynTP.sys (Synaptics Incorporated)
DRV:[b]64bit:[/b] - (SmbDrvI) -- C:\windows\SysNative\Drivers\Smb_driver_Intel.sys (Synaptics Incorporated)
DRV:[b]64bit:[/b] - (vm331avs) -- C:\windows\SysNative\Drivers\vm331avs.sys (Vimicro Corporation)
DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (condrv) -- C:\windows\SysNative\Drivers\condrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (VSTXRAID) -- C:\windows\SysNative\Drivers\VSTXRAID.SYS (VIA Corporation)
DRV:[b]64bit:[/b] - (VerifierExt) -- C:\windows\SysNative\Drivers\VerifierExt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UASPStor) -- C:\windows\SysNative\Drivers\uaspstor.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpiex) -- C:\windows\SysNative\Drivers\acpiex.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (mvumis) -- C:\windows\SysNative\Drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:[b]64bit:[/b] - (stexstor) -- C:\windows\SysNative\Drivers\stexstor.sys (Promise Technology, Inc.)
DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\windows\SysNative\Drivers\lsi_sas2.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (LSI_SSS) -- C:\windows\SysNative\Drivers\lsi_sss.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (HpSAMD) -- C:\windows\SysNative\Drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:[b]64bit:[/b] - (EhStorTcgDrv) -- C:\windows\SysNative\Drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (EhStorClass) -- C:\windows\SysNative\Drivers\EhStorClass.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (amdsbs) -- C:\windows\SysNative\Drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:[b]64bit:[/b] - (3ware) -- C:\windows\SysNative\Drivers\3ware.sys (LSI)
DRV:[b]64bit:[/b] - (amdsata) -- C:\windows\SysNative\Drivers\amdsata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (amdxata) -- C:\windows\SysNative\Drivers\amdxata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (CLFS) -- C:\windows\SysNative\Drivers\clfs.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WFPLWFS) -- C:\windows\SysNative\Drivers\wfplwfs.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpci) -- C:\windows\SysNative\Drivers\vpci.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (terminpt) -- C:\windows\SysNative\Drivers\terminpt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (mshidumdf) -- C:\windows\SysNative\Drivers\mshidumdf.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BasicDisplay) -- C:\windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (HyperVideo) -- C:\windows\SysNative\Drivers\HyperVideo.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BasicRender) -- C:\windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (gencounter) -- C:\windows\SysNative\Drivers\vmgencounter.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (kdnic) -- C:\windows\SysNative\Drivers\kdnic.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpitime) -- C:\windows\SysNative\Drivers\acpitime.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (npsvctrig) -- C:\windows\SysNative\Drivers\npsvctrig.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WpdUpFltr) -- C:\windows\SysNative\Drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpipagr) -- C:\windows\SysNative\Drivers\acpipagr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (hyperkbd) -- C:\windows\SysNative\Drivers\hyperkbd.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (SerCx) -- C:\windows\SysNative\Drivers\SerCx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (SpbCx) -- C:\windows\SysNative\Drivers\SpbCx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\windows\SysNative\Drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BthHFEnum) -- C:\windows\SysNative\Drivers\bthhfenum.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dmvsc) -- C:\windows\SysNative\Drivers\dmvsc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\windows\SysNative\Drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (wpcfltr) -- C:\windows\SysNative\Drivers\wpcfltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BthLEEnum) -- C:\windows\SysNative\Drivers\BthLEEnum.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (NdisImPlatform) -- C:\windows\SysNative\Drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (MsLldp) -- C:\windows\SysNative\Drivers\mslldp.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Ndu) -- C:\windows\SysNative\Drivers\Ndu.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (L1C) -- C:\windows\SysNative\Drivers\L1C63x64.sys (Qualcomm Atheros Co., Ltd.)
DRV:[b]64bit:[/b] - (MEIx64) -- C:\windows\SysNative\Drivers\HECIx64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (CnxtHdAudService) -- C:\windows\SysNative\Drivers\CHDRT64.sys (Conexant Systems Inc.)
DRV:[b]64bit:[/b] - (IntcDAud) -- C:\windows\SysNative\Drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:[b]64bit:[/b] - (RSUSBVSTOR) -- C:\windows\SysNative\Drivers\RtsUVStor.sys (Realtek Semiconductor Corp.)
DRV:[b]64bit:[/b] - (wsvd) -- C:\windows\SysNative\Drivers\wsvd.sys ("CyberLink)
DRV:[b]64bit:[/b] - (NETwNs64) -- C:\windows\SysNative\Drivers\NETwNs64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (e1iexpress) -- C:\windows\SysNative\Drivers\e1i63x64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (ssadmdm) -- C:\windows\SysNative\Drivers\ssadmdm.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (ssadserd) -- C:\windows\SysNative\Drivers\ssadserd.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (ssadbus) -- C:\windows\SysNative\Drivers\ssadbus.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (ssadmdfl) -- C:\windows\SysNative\Drivers\ssadmdfl.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (Sentinel64) -- C:\windows\SysNative\Drivers\sentinel64.sys (SafeNet, Inc.)
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{74556233-7F34-4D69-A8A0-74A0D7386839}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.smilebox.com/?src=10&st=12&crg=3.5000006.10040&barid={F6E2ABFA-DC7F-11E2-BE83-2CD05AF21698}
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.smilebox.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10040&barid={F6E2ABFA-DC7F-11E2-BE83-2CD05AF21698}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com [binary data]
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snap.do/?publisher=Bundlore&dpid=Bundlore&co=CA&userid=cce5c4ea-d773-4535-bb8f-9ccba2d45c81&searchtype=ds&q={searchTerms}&installDate=20/05/2013
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes\{394E4C6B-95BC-44F6-97CA-FA8E20DF5B43}: "URL" = http://www.mysearchresults.com/search?c=2854&t=02&q={searchTerms}
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGIE_enCA551
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.smilebox.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10040&barid={F6E2ABFA-DC7F-11E2-BE83-2CD05AF21698}
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\SearchScopes\{FEB00F85-BDF7-45BB-AB23-AB6E3F6FEBC8}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3303004&CUI=UN15016259562848259&UM=2
IE - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.2.32: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.2.32: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SMILEBOX\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\Program Files\Updater By Smilebox\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FCE04E1F-9378-4f39-96F6-5689A9159E45}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013-06-30 09:27:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-06-30 09:27:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-07-18 00:33:04 | 000,000,000 | ---D | M]
 
[2013-07-15 13:26:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krasimira\AppData\Roaming\Mozilla\Extensions
[2013-05-18 12:59:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krasimira\AppData\Roaming\Mozilla\Firefox\Profiles\[ofr2][opt]rs0\extensions
 
O1 HOSTS File: ([2013-08-30 11:35:45 | 000,000,098 | ---- | M]) - C:\windows\SysNative\Drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:[b]64bit:[/b] - HKU\S-1-5-21-3645740697-2236784829-290951543-1001\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE (Vimicro)
O4 - HKLM..\Run: [CStart8] C:\Program Files (x86)\CStart8\CStart8Tray64.exe (Crawler.com)
O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Dolby Laboratories Inc.)
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel Corporation)
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
O4 - HKU\S-1-5-21-3645740697-2236784829-290951543-1001..\Run: [BitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O4 - HKU\S-1-5-21-3645740697-2236784829-290951543-1001..\Run: [Green Christmas Tree] C:\Users\Krasimira\Desktop\? ???????????!!!!.exe ()
O4 - HKU\S-1-5-21-3645740697-2236784829-290951543-1001..\Run: [X-Lite] C:\Program Files (x86)\CounterPath\X-Lite\X-Lite.exe (CounterPath)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" (Qualcomm Atheros Commnucations)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O13[b]64bit:[/b] - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.59.135.143 64.59.128.113
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EF718535-6535-4CE9-B1B2-1B6A5AA1792E}: DhcpNameServer = 64.59.135.143 64.59.128.113
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs:[b]64bit:[/b] wlidsvc - C:\windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
 
 
SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] MCODS - Reg Error: Value error.
SafeBootMin:[b]64bit:[/b] Netlogon - C:\windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - Reg Error: Value error.
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] MCODS - Reg Error: Value error.
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: MCODS - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {30FB467D-7995-51F9-1D46-3E2E9B277EE7} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {3711FAF6-9F93-B813-E0E9-3647D3824E49} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C1C858E6-3DDD-DD69-0D5C-A77FA099A36D} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {CC3A48F1-B1DF-08A6-96F8-08562A724DEA} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {EA2C1926-5DB2-180C-E1E6-637FE7FFC860} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - 
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {A3593175-5BD2-6082-DCD8-95C831BFF3E0} - DirectX
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E06E04C4-8C37-3848-85D2-29A1255258CD} - Offline Browsing Pack
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - ff_vfw.dll File not found
Drivers32: vidc.tscc - C:\Program Files (x86)\MpcStar\Codecs\tscc\tsccvid.dll (TechSmith Corporation)
 
[color=#E56717]========== Files/Folders - Created Within 180 Days ==========[/color]
 
[2013-08-29 11:13:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files
[2013-08-29 10:46:17 | 260,038,464 | ---- | C] (Kaspersky Lab) -- C:\Users\Krasimira\Desktop\kis14.0.0.4651aEN_4879.exe
[2013-08-28 15:56:25 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Krasimira\Desktop\OTL.exe
[2013-08-28 14:13:12 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Malwarebytes
[2013-08-28 14:13:00 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
[2013-08-28 14:13:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013-08-28 14:13:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013-08-28 14:11:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2013-08-09 14:24:07 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Microsoft_Corporation
[2013-07-27 08:27:10 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Apps
[2013-07-27 08:20:14 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Diagnostics
[2013-07-22 15:52:23 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Autodesk, Inc
[2013-07-18 00:35:15 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\ESET
[2013-07-18 00:35:15 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\ESET
[2013-07-18 00:32:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2013-07-18 00:32:36 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2013-07-18 00:32:36 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2013-07-15 13:26:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Feven
[2013-07-11 22:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\StarApp
[2013-07-11 21:07:52 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013-07-08 10:54:06 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\DivX
[2013-07-08 10:52:14 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2013-07-08 10:51:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DivX
[2013-07-08 10:50:32 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2013-07-04 08:33:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CounterPath X-Lite
[2013-07-04 08:33:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CounterPath
[2013-06-30 09:27:57 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\RealNetworks
[2013-06-30 09:27:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RealNetworks
[2013-06-30 09:27:09 | 000,000,000 | ---D | C] -- C:\ProgramData\RealNetworks
[2013-06-30 09:27:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2013-06-30 09:26:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2013-06-30 09:26:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Real
[2013-06-30 09:26:22 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Real
[2013-06-30 09:25:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2013-06-24 07:54:47 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\SketchUp
[2013-06-24 07:54:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2013
[2013-06-24 07:54:11 | 000,000,000 | ---D | C] -- C:\ProgramData\SketchUp
[2013-06-24 07:54:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SketchUp
[2013-06-24 07:52:16 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Google
[2013-06-24 07:49:52 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2013-06-24 07:48:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google SketchUp 8
[2013-06-24 07:48:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013-06-24 07:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2013-06-24 07:42:25 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bandizip
[2013-06-24 07:42:24 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Bandizip
[2013-06-24 07:31:21 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\DefaultTab
[2013-06-16 22:03:29 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Business-in-a-Box Files
[2013-05-28 06:48:49 | 000,000,000 | ---D | C] -- C:\ProgramData\lx_Cats
[2013-05-25 18:54:31 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\RESUMES
[2013-05-25 18:53:57 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\SECOND YEAR
[2013-05-25 18:53:35 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\FIRST YEAR
[2013-05-23 17:19:15 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\VisualBeeExe
[2013-05-23 17:18:57 | 000,000,000 | ---D | C] -- C:\ProgramData\VisualBee
[2013-05-23 17:03:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2013-05-23 17:03:19 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Conduit
[2013-05-23 16:27:12 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\player
[2013-05-23 16:26:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup
[2013-05-23 16:26:32 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\DealPly
[2013-05-23 16:26:20 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Google
[2013-05-22 11:27:31 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\Musika
[2013-05-21 16:24:25 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Identities
[2013-05-21 16:06:33 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\OneNote Notebooks
[2013-05-21 15:57:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2013-05-21 15:56:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2013-05-21 15:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2013-05-21 15:55:14 | 000,000,000 | ---D | C] -- C:\windows\PCHEALTH
[2013-05-21 15:52:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013-05-21 15:52:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2013-05-21 15:51:47 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Microsoft Help
[2013-05-20 21:58:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\BitComet
[2013-05-20 21:58:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
[2013-05-20 21:58:49 | 000,000,000 | ---D | C] -- C:\Program Files\BitComet
[2013-05-20 08:33:47 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Programs
[2013-05-19 16:41:46 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2013-05-19 16:41:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MpcStar
[2013-05-19 16:41:30 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\tigerplayer
[2013-05-19 16:41:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MpcStar
[2013-05-19 16:41:30 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\CometPlayer
[2013-05-19 16:36:13 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\WebApp
[2013-05-19 16:34:39 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Cyberlink
[2013-05-19 16:34:37 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Lenovo
[2013-05-19 16:34:37 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\CyberLink
[2013-05-19 16:34:16 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\CyberLink
[2013-05-19 16:11:28 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\Friends - full serial
[2013-05-19 10:45:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Navisworks 2013
[2013-05-19 10:45:08 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Autodesk Navisworks Manage 2013
[2013-05-19 10:45:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk Navisworks Manage 2013
[2013-05-19 10:43:37 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Autodesk Showcase 2013
[2013-05-19 10:40:50 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Autodesk,_Inc
[2013-05-19 10:26:39 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Infrastructure Models
[2013-05-18 14:05:03 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\snimki
[2013-05-18 14:02:34 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Desktop\documenti za bliznaci
[2013-05-18 13:58:49 | 001,962,344 | ---- | C] (Crawler, LLC                                                ) -- C:\Users\Krasimira\Documents\ClassicStart8Setup.exe
[2013-05-18 12:59:30 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\SwvUpdater
[2013-05-18 12:59:02 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Mozilla
[2013-05-18 12:59:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TornTV.com
[2013-05-18 11:47:36 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2013-05-18 11:40:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer
[2013-05-18 11:17:47 | 000,142,120 | ---- | C] (SafeNet, Inc.) -- C:\windows\SysNative\drivers\sentinel64.sys
[2013-05-18 11:16:24 | 000,000,000 | -H-D | C] -- C:\windows\PIF
[2013-05-18 08:53:50 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\CounterPath Corporation
[2013-05-18 08:53:45 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\CounterPath
[2013-05-18 08:52:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2013-05-18 08:52:09 | 047,103,224 | ---- | C] (CounterPath Corporation                                     ) -- C:\Users\Krasimira\Documents\X-Lite_Win32_4.5.2_70142.exe
[2013-05-17 23:57:57 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\thediction.com_10Alpha3
[2013-05-17 22:58:17 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\cache
[2013-05-17 22:55:20 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2013-05-17 22:42:29 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server x64 3dsMaxDesign
[2013-05-17 22:27:35 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor
[2013-05-17 22:22:12 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Autodesk
[2013-05-17 22:20:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DWG TrueView 2013
[2013-05-17 22:20:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Designer
[2013-05-17 22:12:38 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server SDK MEP 2013
[2013-05-17 22:09:07 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server SDK ACA 2013
[2013-05-17 22:06:17 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server x64 Showcase2013
[2013-05-17 21:56:00 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\3dsMaxDesign
[2013-05-17 21:54:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server x64 Direct Connect
[2013-05-17 21:52:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2013-05-17 21:51:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Business Objects
[2013-05-17 21:51:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Autodesk
[2013-05-17 21:50:48 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Autodesk
[2013-05-17 21:41:40 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server x64 InvSvr_x64_NAVMAN_10
[2013-05-17 21:37:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2013-05-17 21:36:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Inventor Server SDK ACAD 2013
[2013-05-17 21:35:31 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Autodesk
[2013-05-17 21:32:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autodesk
[2013-05-17 21:32:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2013-05-17 21:31:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
[2013-05-17 21:25:41 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Adobe
[2013-05-17 21:24:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Autodesk Shared
[2013-05-17 21:24:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Autodesk Shared
[2013-05-17 21:23:46 | 000,000,000 | ---D | C] -- C:\Program Files\Autodesk
[2013-05-17 20:40:27 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Autodesk
[2013-05-17 20:40:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk
[2013-05-17 17:05:28 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\CrashDumps
[2013-05-17 17:03:49 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\ElevatedDiagnostics
[2013-05-17 16:55:25 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\CStart8
[2013-05-17 16:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Start 8
[2013-05-17 16:55:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CStart8
[2013-05-17 16:53:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Stardock
[2013-05-17 16:52:58 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Nitro
[2013-05-17 16:02:01 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Skype
[2013-05-17 16:01:52 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013-05-17 16:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013-05-17 16:01:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013-05-17 16:01:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013-05-17 16:00:53 | 001,337,448 | ---- | C] (Skype Technologies S.A.) -- C:\Users\Krasimira\Documents\SkypeSetup.exe
[2013-05-17 14:43:17 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\LSC
[2013-05-17 14:43:11 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Nitro PDF
[2013-05-17 14:42:59 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\LSC
[2013-05-17 14:35:27 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\BMExplorer
[2013-05-17 14:35:27 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\Documents\Bluetooth Folder
[2013-05-17 14:35:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Energy Management
[2013-05-17 14:35:14 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Lenovo
[2013-05-17 14:35:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2013-05-17 14:35:07 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Atheros
[2013-05-17 14:34:37 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013-05-17 14:34:37 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Searches
[2013-05-17 14:34:37 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Contacts
[2013-05-17 14:34:37 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013-05-17 14:34:37 | 000,000,000 | -H-D | C] -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013-05-17 14:34:24 | 000,000,000 | ---D | C] -- C:\ProgramData\eBay
[2013-05-17 14:33:55 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Adobe
[2013-05-17 14:33:11 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\VirtualStore
[2013-05-17 14:33:03 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Packages
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\AppData\Local\Temporary Internet Files
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Templates
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Start Menu
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\SendTo
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Recent
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\PrintHood
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\NetHood
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Documents\My Videos
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Documents\My Pictures
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Documents\My Music
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\My Documents
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Local Settings
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\AppData\Local\History
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Cookies
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\Application Data
[2013-05-17 14:32:52 | 000,000,000 | -HSD | C] -- C:\Users\Krasimira\AppData\Local\Application Data
[2013-05-17 14:32:51 | 000,000,000 | --SD | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Videos
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Saved Games
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Pictures
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Music
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Links
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Favorites
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Downloads
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Documents
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\Desktop
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013-05-17 14:32:51 | 000,000,000 | R--D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2013-05-17 14:32:51 | 000,000,000 | -H-D | C] -- C:\Users\Krasimira\AppData
[2013-05-17 14:32:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Temp
[2013-05-17 14:32:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Local\Microsoft
[2013-05-17 14:32:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013-05-17 14:32:51 | 000,000,000 | ---D | C] -- C:\Users\Krasimira\AppData\Roaming\Macromedia
[2013-05-08 08:14:58 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2013-05-08 08:14:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2013-05-08 08:14:33 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
[2013-05-08 08:14:32 | 000,102,376 | ---- | C] ("CyberLink) -- C:\windows\SysNative\drivers\wsvd.sys
[2013-05-08 08:14:32 | 000,000,000 | ---D | C] -- C:\ProgramData\OneKey Recovery
[2013-05-08 08:14:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
[2013-05-08 08:12:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Lenovo
[2013-05-08 08:10:21 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2013-05-08 08:09:50 | 000,000,000 | ---D | C] -- C:\Program Files\Lenovo
[2013-05-08 08:09:49 | 000,000,000 | ---D | C] -- C:\windows\Downloaded Installations
[2013-05-08 08:09:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013-05-08 08:09:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2013-05-08 08:09:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2013-05-08 08:08:59 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2013-05-08 08:08:54 | 000,000,000 | ---D | C] -- C:\windows\fr-FR
[2013-05-08 08:07:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SugarSync
[2013-05-08 08:06:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cyberlink
[2013-05-08 08:05:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp
[2013-05-08 08:05:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
[2013-05-08 08:05:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lenovo
[2013-05-08 08:03:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro
[2013-05-08 08:02:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2013-05-08 07:53:20 | 000,136,424 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_rcp.sys
[2013-05-08 07:53:19 | 000,179,432 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_hcrp.sys
[2013-05-08 07:53:19 | 000,077,464 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_lwflt.sys
[2013-05-08 07:53:18 | 000,346,192 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_a2dp.sys
[2013-05-08 07:53:18 | 000,115,280 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_avdt.sys
[2013-05-08 07:53:18 | 000,089,168 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_flt.sys
[2013-05-08 07:53:17 | 000,581,200 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btfilter.sys
[2013-05-08 07:53:17 | 000,034,384 | ---- | C] (Qualcomm Atheros) -- C:\windows\SysNative\drivers\btath_bus.sys
[2013-05-08 07:53:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Atheros
[2013-05-08 07:52:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\QCA_Bluetooth
[2013-05-08 07:52:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bluetooth Suite
[2013-05-08 07:51:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\USB Camera
[2013-05-08 07:51:38 | 000,975,104 | ---- | C] (Vimicro Corporation) -- C:\windows\SysNative\drivers\vm331avs.sys
[2013-05-08 07:51:38 | 000,311,808 | ---- | C] (Vimicro Corporation) -- C:\windows\SysNative\VmCoinst.dll
[2013-05-08 07:51:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vimicro
[2013-05-08 07:49:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Qualcomm Atheros
[2013-05-08 07:49:28 | 003,653,632 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\windows\SysNative\drivers\athw8x.sys
[2013-05-08 07:49:28 | 003,653,632 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\windows\SysNative\athw8x.sys
[2013-05-08 07:49:28 | 000,000,000 | ---D | C] -- C:\windows\Options
[2013-05-08 07:49:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros
[2013-05-08 07:47:06 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2013-05-08 07:46:06 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\Atheros_L1e
[2013-05-08 07:45:51 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\sda
[2013-05-08 07:45:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2013-05-08 07:45:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dolby Advanced Audio v2
[2013-05-08 07:45:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
[2013-05-08 07:44:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Conexant
[2013-05-08 07:44:21 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2013-05-08 07:38:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2013-05-08 07:38:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2013-05-08 07:38:26 | 000,056,832 | ---- | C] (Khronos Group) -- C:\windows\SysNative\OpenCL.DLL
[2013-05-08 07:38:26 | 000,056,320 | ---- | C] (Khronos Group) -- C:\windows\SysWow64\OpenCL.DLL
[2013-05-08 07:37:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2013-05-08 07:37:14 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013-05-08 07:36:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2013-05-08 07:36:47 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013-05-08 07:33:16 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\windows\SysWow64\CSVer.dll
[2013-05-08 07:33:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2013-05-08 07:23:29 | 000,000,000 | ---D | C] -- C:\windows\SoftwareDistribution
[2013-03-13 18:19:10 | 000,056,832 | ---- | C] (Khronos Group) -- C:\windows\SysNative\Intel_OpenCL_ICD64.dll
[2013-03-13 18:19:10 | 000,056,320 | ---- | C] (Khronos Group) -- C:\windows\SysWow64\Intel_OpenCL_ICD32.dll
 
[color=#E56717]========== Files - Modified Within 180 Days ==========[/color]
 
[2013-08-30 11:56:10 | 000,848,230 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2013-08-30 11:56:10 | 000,722,260 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2013-08-30 11:56:10 | 000,136,434 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2013-08-30 11:54:52 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013-08-29 10:52:27 | 260,038,464 | ---- | M] (Kaspersky Lab) -- C:\Users\Krasimira\Desktop\kis14.0.0.4651aEN_4879.exe
[2013-08-28 15:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Krasimira\Desktop\OTL.exe
[2013-08-28 15:50:38 | 000,139,264 | ---- | M] () -- C:\Users\Krasimira\Desktop\SystemLook.exe
[2013-07-27 07:41:02 | 000,013,689 | ---- | M] () -- C:\Users\Krasimira\Desktop\Microsoft Office 2007 Enterprise UG VL DVD-ZWTiSO.torrent
[2013-07-23 17:11:02 | 000,350,467 | ---- | M] () -- C:\Users\Krasimira\Desktop\2013 Q2.pdf
[2013-07-18 00:09:00 | 000,000,916 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-07-17 23:45:35 | 000,000,912 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-07-13 09:08:47 | 000,582,632 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2013-07-04 08:33:56 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\X-Lite.lnk
[2013-06-30 09:27:14 | 000,001,275 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2013-06-29 21:25:25 | 072,099,420 | ---- | M] () -- C:\Users\Krasimira\Desktop\Google SketchUp Pro 8.0.4811 incl crack-serials(www.pkgames.net).rar
[2013-06-24 07:54:26 | 000,003,120 | ---- | M] () -- C:\windows\SysWow64\ALLFSAF13a.ocx
[2013-06-24 07:54:25 | 000,002,199 | ---- | M] () -- C:\Users\Public\Desktop\Style Builder 2013.lnk
[2013-06-24 07:54:25 | 000,002,113 | ---- | M] () -- C:\Users\Public\Desktop\LayOut 2013.lnk
[2013-06-24 07:54:25 | 000,002,028 | ---- | M] () -- C:\Users\Public\Desktop\SketchUp 2013.lnk
[2013-06-24 07:49:08 | 000,003,120 | ---- | M] () -- C:\windows\SysWow64\ALLFSAF8a.ocx
[2013-06-24 07:48:22 | 000,002,207 | ---- | M] () -- C:\Users\Public\Desktop\Style Builder 2.lnk
[2013-06-24 07:48:22 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\LayOut 3.lnk
[2013-06-24 07:48:22 | 000,002,036 | ---- | M] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk
[2013-06-24 07:42:25 | 000,001,197 | ---- | M] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Bandizip.lnk
[2013-06-24 07:42:25 | 000,001,195 | ---- | M] () -- C:\Users\Krasimira\Desktop\Bandizip.lnk
[2013-06-24 07:31:23 | 000,000,258 | RHS- | M] () -- C:\Users\Krasimira\ntuser.pol
[2013-06-21 07:40:02 | 000,000,369 | ---- | M] () -- C:\Users\Krasimira\AppData\Local\RegisteredPackageInformation.xml
[2013-06-17 21:18:47 | 000,002,002 | ---- | M] () -- C:\Users\Public\Desktop\Lenovo Solution Center.lnk
[2013-06-16 22:04:00 | 000,000,670 | ---- | M] () -- C:\Users\Krasimira\AppData\Roaming\bibstats
[2013-05-28 06:48:49 | 000,000,154 | ---- | M] () -- C:\windows\SysNative\LexFiles.ulf
[2013-05-25 18:50:24 | 009,543,774 | ---- | M] () -- C:\Users\Krasimira\Documents\BlueWater.themepack
[2013-05-25 18:47:11 | 018,848,284 | ---- | M] () -- C:\Users\Krasimira\Documents\QueenstownNZIanRushton.themepack
[2013-05-23 17:00:40 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
[2013-05-21 16:06:31 | 000,001,317 | ---- | M] () -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
[2013-05-20 22:15:08 | 000,357,853 | ---- | M] () -- C:\Users\Krasimira\Documents\treti file ms office.png
[2013-05-20 22:13:12 | 000,705,708 | ---- | M] () -- C:\Users\Krasimira\Documents\vtori file ms office.png
[2013-05-20 21:58:52 | 000,000,823 | ---- | M] () -- C:\Users\Public\Desktop\BitComet.lnk
[2013-05-20 21:58:24 | 010,889,568 | ---- | M] () -- C:\Users\Krasimira\Documents\BitComet_1-35_x64_setup.exe
[2013-05-19 18:08:47 | 000,386,642 | ---- | M] () -- C:\windows\SysNative\ApnDatabase.xml
[2013-05-19 16:41:32 | 000,001,152 | ---- | M] () -- C:\Users\Krasimira\Documents\Comet Player.lnk
[2013-05-19 16:41:32 | 000,001,002 | ---- | M] () -- C:\Users\Public\Desktop\MpcStar.lnk
[2013-05-19 10:30:46 | 000,000,144 | ---- | M] () -- C:\Users\Krasimira\Documents\acad.err
[2013-05-18 08:52:09 | 047,103,224 | ---- | M] (CounterPath Corporation                                     ) -- C:\Users\Krasimira\Documents\X-Lite_Win32_4.5.2_70142.exe
[2013-05-17 23:57:36 | 007,535,127 | ---- | M] () -- C:\Users\Krasimira\Documents\thediction.com_10Alpha3.zip
[2013-05-17 22:38:56 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\Inventor Fusion 2013.lnk
[2013-05-17 22:34:03 | 000,002,145 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Infrastructure Modeler 2013.lnk
[2013-05-17 22:25:26 | 000,002,230 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Inventor 2013.lnk
[2013-05-17 22:21:18 | 000,002,110 | ---- | M] () -- C:\Users\Public\Desktop\DWG TrueView 2013.lnk
[2013-05-17 22:20:05 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\SketchBook Designer 2013.lnk
[2013-05-17 22:18:17 | 000,002,190 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk
[2013-05-17 22:17:49 | 000,002,261 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD Structural Detailing 2013 - English.lnk
[2013-05-17 22:14:27 | 000,002,373 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD MEP 2013 - English (Global).lnk
[2013-05-17 22:11:00 | 000,002,415 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD Architecture 2013 - English (US Metric).lnk
[2013-05-17 22:11:00 | 000,002,409 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD Architecture 2013 - English (Global).lnk
[2013-05-17 22:06:08 | 000,001,870 | ---- | M] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Showcase 2013 (64-bit).lnk
[2013-05-17 22:06:08 | 000,001,846 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Showcase 2013 (64-bit).lnk
[2013-05-17 22:00:20 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk 3ds Max Design 2013 64-bit.lnk
[2013-05-17 21:52:11 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Quantity Takeoff 2013.lnk
[2013-05-17 21:50:39 | 000,002,369 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Robot Structural Analysis Professional 2013.lnk
[2013-05-17 21:41:22 | 000,002,061 | ---- | M] () -- C:\Users\Public\Desktop\Navisworks Manage 2013.lnk
[2013-05-17 21:36:57 | 000,002,109 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD 2013 - English.lnk
[2013-05-17 21:36:07 | 000,000,153 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013-05-17 21:31:56 | 000,002,078 | ---- | M] () -- C:\Users\Public\Desktop\Revit 2013.lnk
[2013-05-17 16:55:15 | 001,962,344 | ---- | M] (Crawler, LLC                                                ) -- C:\Users\Krasimira\Documents\ClassicStart8Setup.exe
[2013-05-17 16:52:29 | 008,369,112 | ---- | M] () -- C:\Users\Krasimira\Documents\Start8-cnet-setup.exe
[2013-05-17 16:01:52 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-05-17 16:00:53 | 001,337,448 | ---- | M] (Skype Technologies S.A.) -- C:\Users\Krasimira\Documents\SkypeSetup.exe
[2013-05-17 14:38:31 | 000,001,435 | ---- | M] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013-05-08 08:18:04 | 002,271,773 | ---- | M] () -- C:\windows\MFGSTAT.zip
[2013-05-08 08:16:28 | 000,000,011 | ---- | M] () -- C:\windows\SysNative\lendrvchk.scp
[2013-05-08 08:14:33 | 000,002,097 | ---- | M] () -- C:\Users\Public\Desktop\OneKey Recovery.lnk
[2013-05-08 08:14:01 | 000,002,238 | ---- | M] () -- C:\Users\Public\Desktop\Intel AppUp(SM) center.lnk
[2013-05-08 08:12:23 | 000,000,198 | -H-- | M] () -- C:\ProgramData\Lenovo-25628.vbs
[2013-05-08 08:09:02 | 000,002,188 | ---- | M] () -- C:\Users\Public\Desktop\Lenovo PowerDVD 10.lnk
[2013-05-08 08:06:58 | 000,001,241 | ---- | M] () -- C:\Users\Public\Desktop\Lenovo YouCam.lnk
[2013-05-08 08:05:07 | 000,002,083 | ---- | M] () -- C:\Users\Krasimira\Documents\UserGuide.lnk
[2013-05-08 07:47:09 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013-05-08 07:47:07 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
[2013-05-08 07:45:36 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2013-05-08 07:42:21 | 000,016,238 | ---- | M] () -- C:\windows\SysNative\results.xml
[2013-05-08 07:32:33 | 000,000,042 | ---- | M] () -- C:\windows\SysWow64\drivers\17AA_Lenovo_Lenovo_G780_20138.MRK
[2013-04-04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-08-28 15:50:37 | 000,139,264 | ---- | C] () -- C:\Users\Krasimira\Desktop\SystemLook.exe
[2013-07-27 07:40:57 | 000,013,689 | ---- | C] () -- C:\Users\Krasimira\Desktop\Microsoft Office 2007 Enterprise UG VL DVD-ZWTiSO.torrent
[2013-07-23 17:10:59 | 000,350,467 | ---- | C] () -- C:\Users\Krasimira\Desktop\2013 Q2.pdf
[2013-07-13 09:08:12 | 000,582,632 | ---- | C] () -- C:\windows\SysNative\FNTCACHE.DAT
[2013-07-09 12:53:44 | 000,386,642 | ---- | C] () -- C:\windows\SysNative\ApnDatabase.xml
[2013-07-04 08:33:56 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\X-Lite.lnk
[2013-06-30 09:27:14 | 000,001,275 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2013-06-24 07:54:26 | 000,003,120 | ---- | C] () -- C:\windows\SysWow64\ALLFSAF13a.ocx
[2013-06-24 07:54:25 | 000,002,199 | ---- | C] () -- C:\Users\Public\Desktop\Style Builder 2013.lnk
[2013-06-24 07:54:25 | 000,002,113 | ---- | C] () -- C:\Users\Public\Desktop\LayOut 2013.lnk
[2013-06-24 07:54:25 | 000,002,028 | ---- | C] () -- C:\Users\Public\Desktop\SketchUp 2013.lnk
[2013-06-24 07:49:59 | 000,000,916 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-06-24 07:49:57 | 000,000,912 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-06-24 07:49:08 | 000,003,120 | ---- | C] () -- C:\windows\SysWow64\ALLFSAF8a.ocx
[2013-06-24 07:48:22 | 000,002,207 | ---- | C] () -- C:\Users\Public\Desktop\Style Builder 2.lnk
[2013-06-24 07:48:22 | 000,002,121 | ---- | C] () -- C:\Users\Public\Desktop\LayOut 3.lnk
[2013-06-24 07:48:22 | 000,002,036 | ---- | C] () -- C:\Users\Public\Desktop\Google SketchUp 8.lnk
[2013-06-24 07:42:25 | 000,001,197 | ---- | C] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Bandizip.lnk
[2013-06-24 07:42:25 | 000,001,195 | ---- | C] () -- C:\Users\Krasimira\Desktop\Bandizip.lnk
[2013-06-24 07:35:53 | 072,099,420 | ---- | C] () -- C:\Users\Krasimira\Desktop\Google SketchUp Pro 8.0.4811 incl crack-serials(www.pkgames.net).rar
[2013-06-24 07:31:23 | 000,000,258 | RHS- | C] () -- C:\Users\Krasimira\ntuser.pol
[2013-06-21 07:39:53 | 000,000,369 | ---- | C] () -- C:\Users\Krasimira\AppData\Local\RegisteredPackageInformation.xml
[2013-06-17 21:18:47 | 000,002,002 | ---- | C] () -- C:\Users\Public\Desktop\Lenovo Solution Center.lnk
[2013-06-16 22:03:40 | 000,000,670 | ---- | C] () -- C:\Users\Krasimira\AppData\Roaming\bibstats
[2013-05-28 06:48:49 | 000,000,154 | ---- | C] () -- C:\windows\SysNative\LexFiles.ulf
[2013-05-28 06:48:30 | 000,299,520 | ---- | C] () -- C:\windows\SysNative\lxdxgrd.dll
[2013-05-28 06:48:24 | 001,734,144 | ---- | C] ( ) -- C:\windows\SysNative\lxdxserv.dll
[2013-05-28 06:48:24 | 000,514,048 | ---- | C] ( ) -- C:\windows\SysNative\lxdxih.exe
[2013-05-28 06:48:24 | 000,109,056 | ---- | C] () -- C:\windows\SysNative\lxdxvs.dll
[2013-05-28 06:48:24 | 000,047,104 | ---- | C] ( ) -- C:\windows\SysNative\lxdxprox.dll
[2013-05-28 06:48:23 | 001,039,872 | ---- | C] ( ) -- C:\windows\SysNative\lxdxcoms.exe
[2013-05-28 06:48:23 | 000,977,920 | ---- | C] ( ) -- C:\windows\SysNative\lxdxpmui.dll
[2013-05-28 06:48:23 | 000,884,736 | ---- | C] ( ) -- C:\windows\SysNative\lxdxlmpm.dll
[2013-05-28 06:48:23 | 000,578,560 | ---- | C] ( ) -- C:\windows\SysNative\lxdxcomm.dll
[2013-05-28 06:48:22 | 000,545,792 | ---- | C] ( ) -- C:\windows\SysNative\lxdxinpa.dll
[2013-05-28 06:48:22 | 000,509,952 | ---- | C] ( ) -- C:\windows\SysNative\lxdxiesc.dll
[2013-05-28 06:48:21 | 001,472,512 | ---- | C] ( ) -- C:\windows\SysNative\lxdxcomc.dll
[2013-05-28 06:48:21 | 001,319,936 | ---- | C] ( ) -- C:\windows\SysNative\lxdxusb1.dll
[2013-05-28 06:48:21 | 001,069,056 | ---- | C] ( ) -- C:\windows\SysNative\lxdxhbn3.dll
[2013-05-28 06:48:17 | 000,598,528 | ---- | C] ( ) -- C:\windows\SysNative\lxdxcfg.exe
[2013-05-28 06:47:47 | 001,024,512 | ---- | C] () -- C:\windows\SysNative\lxdxdrs64.dll
[2013-05-28 06:47:47 | 000,782,336 | ---- | C] () -- C:\windows\SysWow64\lxdxdrs.dll
[2013-05-28 06:47:47 | 000,081,920 | ---- | C] () -- C:\windows\SysWow64\lxdxcaps.dll
[2013-05-28 06:47:47 | 000,069,632 | ---- | C] () -- C:\windows\SysWow64\lxdxcnv4.dll
[2013-05-28 06:47:47 | 000,054,784 | ---- | C] () -- C:\windows\SysNative\lxdxcnv464.dll
[2013-05-28 06:47:47 | 000,025,600 | ---- | C] () -- C:\windows\SysNative\lxdxcaps64.dll
[2013-05-25 18:52:04 | 018,848,284 | ---- | C] () -- C:\Users\Krasimira\Documents\QueenstownNZIanRushton.themepack
[2013-05-25 18:52:00 | 009,543,774 | ---- | C] () -- C:\Users\Krasimira\Documents\BlueWater.themepack
[2013-05-23 17:00:40 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
[2013-05-21 16:06:31 | 000,001,317 | ---- | C] () -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
[2013-05-20 22:15:08 | 000,357,853 | ---- | C] () -- C:\Users\Krasimira\Documents\treti file ms office.png
[2013-05-20 22:13:12 | 000,705,708 | ---- | C] () -- C:\Users\Krasimira\Documents\vtori file ms office.png
[2013-05-20 21:58:52 | 000,000,823 | ---- | C] () -- C:\Users\Public\Desktop\BitComet.lnk
[2013-05-20 21:58:17 | 010,889,568 | ---- | C] () -- C:\Users\Krasimira\Documents\BitComet_1-35_x64_setup.exe
[2013-05-19 16:41:32 | 000,001,152 | ---- | C] () -- C:\Users\Krasimira\Documents\Comet Player.lnk
[2013-05-19 16:41:32 | 000,001,002 | ---- | C] () -- C:\Users\Public\Desktop\MpcStar.lnk
[2013-05-19 10:30:46 | 000,000,144 | ---- | C] () -- C:\Users\Krasimira\Documents\acad.err
[2013-05-18 11:16:19 | 000,007,782 | ---- | C] () -- C:\windows\b4800.ini
[2013-05-18 11:16:19 | 000,004,777 | ---- | C] () -- C:\windows\B4NP.ini
[2013-05-18 11:16:19 | 000,004,156 | ---- | C] () -- C:\windows\b4.INI
[2013-05-18 11:16:19 | 000,003,425 | ---- | C] () -- C:\windows\bw41024L.ini
[2013-05-18 11:16:19 | 000,003,302 | ---- | C] () -- C:\windows\bw41024s.ini
[2013-05-18 11:16:19 | 000,000,813 | ---- | C] () -- C:\windows\B4User.ini
[2013-05-17 23:57:08 | 007,535,127 | ---- | C] () -- C:\Users\Krasimira\Documents\thediction.com_10Alpha3.zip
[2013-05-17 22:38:56 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\Inventor Fusion 2013.lnk
[2013-05-17 22:34:03 | 000,002,145 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Infrastructure Modeler 2013.lnk
[2013-05-17 22:25:26 | 000,002,230 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Inventor 2013.lnk
[2013-05-17 22:21:18 | 000,002,110 | ---- | C] () -- C:\Users\Public\Desktop\DWG TrueView 2013.lnk
[2013-05-17 22:20:05 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\SketchBook Designer 2013.lnk
[2013-05-17 22:18:17 | 000,002,190 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk
[2013-05-17 22:16:35 | 000,002,261 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD Structural Detailing 2013 - English.lnk
[2013-05-17 22:14:27 | 000,002,373 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD MEP 2013 - English (Global).lnk
[2013-05-17 22:11:00 | 000,002,415 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD Architecture 2013 - English (US Metric).lnk
[2013-05-17 22:11:00 | 000,002,409 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD Architecture 2013 - English (Global).lnk
[2013-05-17 22:06:08 | 000,001,870 | ---- | C] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Showcase 2013 (64-bit).lnk
[2013-05-17 22:06:08 | 000,001,846 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Showcase 2013 (64-bit).lnk
[2013-05-17 22:00:20 | 000,002,026 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk 3ds Max Design 2013 64-bit.lnk
[2013-05-17 21:52:11 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Quantity Takeoff 2013.lnk
[2013-05-17 21:50:39 | 000,002,369 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Robot Structural Analysis Professional 2013.lnk
[2013-05-17 21:41:22 | 000,002,061 | ---- | C] () -- C:\Users\Public\Desktop\Navisworks Manage 2013.lnk
[2013-05-17 21:36:07 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013-05-17 21:35:31 | 000,002,109 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD 2013 - English.lnk
[2013-05-17 21:31:56 | 000,002,078 | ---- | C] () -- C:\Users\Public\Desktop\Revit 2013.lnk
[2013-05-17 16:52:29 | 008,369,112 | ---- | C] () -- C:\Users\Krasimira\Documents\Start8-cnet-setup.exe
[2013-05-17 16:01:52 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-05-17 14:38:31 | 000,001,435 | ---- | C] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013-05-17 14:34:31 | 000,001,441 | ---- | C] () -- C:\Users\Krasimira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013-05-17 14:32:51 | 000,000,352 | ---- | C] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013-05-17 14:32:51 | 000,000,334 | ---- | C] () -- C:\Users\Krasimira\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2013-05-17 14:32:51 | 000,000,189 | ---- | C] () -- C:\Users\Krasimira\Documents\Lenovo Telephony Start Now.url
[2013-05-08 08:18:04 | 002,271,773 | ---- | C] () -- C:\windows\MFGSTAT.zip
[2013-05-08 08:14:33 | 000,002,097 | ---- | C] () -- C:\Users\Public\Desktop\OneKey Recovery.lnk
[2013-05-08 08:14:01 | 000,002,238 | ---- | C] () -- C:\Users\Public\Desktop\Intel AppUp(SM) center.lnk
[2013-05-08 08:12:23 | 000,000,198 | -H-- | C] () -- C:\ProgramData\Lenovo-25628.vbs
[2013-05-08 08:09:02 | 000,002,188 | ---- | C] () -- C:\Users\Public\Desktop\Lenovo PowerDVD 10.lnk
[2013-05-08 08:07:20 | 000,001,973 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Cloud Storage by SugarSync.lnk
[2013-05-08 08:06:58 | 000,001,241 | ---- | C] () -- C:\Users\Public\Desktop\Lenovo YouCam.lnk
[2013-05-08 08:05:07 | 000,002,083 | ---- | C] () -- C:\Users\Krasimira\Documents\UserGuide.lnk
[2013-05-08 07:51:38 | 001,069,056 | ---- | C] () -- C:\windows\SysNative\331prx64.ax
[2013-05-08 07:51:38 | 000,659,456 | ---- | C] () -- C:\windows\SysWow64\vmprp331.ax
[2013-05-08 07:51:38 | 000,001,897 | ---- | C] () -- C:\windows\vm331Rmv.ini
[2013-05-08 07:51:38 | 000,001,897 | ---- | C] () -- C:\windows\SysWow64\vm331Rmv.ini
[2013-05-08 07:51:38 | 000,000,356 | ---- | C] () -- C:\windows\System\vm331avs.rsf
[2013-05-08 07:49:28 | 000,331,272 | ---- | C] () -- C:\windows\SysNative\athw8x.inf
[2013-05-08 07:49:28 | 000,080,062 | ---- | C] () -- C:\windows\SysNative\athw8x.cat
[2013-05-08 07:47:09 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013-05-08 07:47:07 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
[2013-05-08 07:45:36 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2013-05-08 07:42:21 | 000,016,238 | ---- | C] () -- C:\windows\SysNative\results.xml
[2013-05-08 07:32:09 | 000,000,042 | ---- | C] () -- C:\windows\SysWow64\drivers\17AA_Lenovo_Lenovo_G780_20138.MRK
[2013-05-08 07:23:12 | 000,000,011 | ---- | C] () -- C:\windows\SysNative\lendrvchk.scp
[2013-03-13 18:19:10 | 000,598,780 | ---- | C] () -- C:\windows\SysWow64\igvpkrng700.bin
[2013-03-13 18:19:10 | 000,598,780 | ---- | C] () -- C:\windows\SysNative\igvpkrng700.bin
[2013-03-13 18:19:10 | 000,017,062 | ---- | C] () -- C:\windows\SysNative\iglhxs64.vp
[2013-03-13 18:19:08 | 000,009,216 | ---- | C] ( ) -- C:\windows\SysNative\IGFXDEVLib.dll
[2013-03-13 18:19:06 | 000,080,896 | ---- | C] () -- C:\windows\SysNative\igdde64.dll
[2013-03-13 18:19:06 | 000,064,512 | ---- | C] () -- C:\windows\SysWow64\igdde32.dll
[2013-03-13 18:19:05 | 000,755,048 | ---- | C] () -- C:\windows\SysWow64\igcodeckrng700.bin
[2013-03-13 18:19:05 | 000,755,048 | ---- | C] () -- C:\windows\SysNative\igcodeckrng700.bin
[2013-03-13 18:19:04 | 000,223,233 | ---- | C] () -- C:\windows\SysNative\Gfxres.th-TH.resources
[2013-03-13 18:19:04 | 000,209,727 | ---- | C] () -- C:\windows\SysNative\Gfxres.el-GR.resources
[2013-03-13 18:19:04 | 000,193,862 | ---- | C] () -- C:\windows\SysNative\Gfxres.ru-RU.resources
[2013-03-13 18:19:04 | 000,165,865 | ---- | C] () -- C:\windows\SysNative\Gfxres.ar-SA.resources
[2013-03-13 18:19:04 | 000,163,120 | ---- | C] () -- C:\windows\SysNative\Gfxres.ja-JP.resources
[2013-03-13 18:19:04 | 000,158,727 | ---- | C] () -- C:\windows\SysNative\Gfxres.he-IL.resources
[2013-03-13 18:19:04 | 000,149,390 | ---- | C] () -- C:\windows\SysNative\Gfxres.it-IT.resources
[2013-03-13 18:19:04 | 000,147,759 | ---- | C] () -- C:\windows\SysNative\Gfxres.ko-KR.resources
[2013-03-13 18:19:04 | 000,147,101 | ---- | C] () -- C:\windows\SysNative\Gfxres.de-DE.resources
[2013-03-13 18:19:04 | 000,147,010 | ---- | C] () -- C:\windows\SysNative\Gfxres.es-ES.resources
[2013-03-13 18:19:04 | 000,145,730 | ---- | C] () -- C:\windows\SysNative\Gfxres.ro-RO.resources
[2013-03-13 18:19:04 | 000,145,211 | ---- | C] () -- C:\windows\SysNative\Gfxres.fr-FR.resources
[2013-03-13 18:19:04 | 000,144,378 | ---- | C] () -- C:\windows\SysNative\Gfxres.tr-TR.resources
[2013-03-13 18:19:04 | 000,143,976 | ---- | C] () -- C:\windows\SysNative\Gfxres.pt-BR.resources
[2013-03-13 18:19:04 | 000,143,730 | ---- | C] () -- C:\windows\SysNative\Gfxres.nl-NL.resources
[2013-03-13 18:19:04 | 000,143,657 | ---- | C] () -- C:\windows\SysNative\Gfxres.hu-HU.resources
[2013-03-13 18:19:04 | 000,142,990 | ---- | C] () -- C:\windows\SysNative\Gfxres.pt-PT.resources
[2013-03-13 18:19:04 | 000,142,617 | ---- | C] () -- C:\windows\SysNative\Gfxres.sv-SE.resources
[2013-03-13 18:19:04 | 000,142,423 | ---- | C] () -- C:\windows\SysNative\Gfxres.pl-PL.resources
[2013-03-13 18:19:04 | 000,142,008 | ---- | C] () -- C:\windows\SysNative\Gfxres.cs-CZ.resources
[2013-03-13 18:19:04 | 000,141,739 | ---- | C] () -- C:\windows\SysNative\Gfxres.fi-FI.resources
[2013-03-13 18:19:04 | 000,141,582 | ---- | C] () -- C:\windows\SysNative\Gfxres.sk-SK.resources
[2013-03-13 18:19:04 | 000,140,779 | ---- | C] () -- C:\windows\SysNative\Gfxres.hr-HR.resources
[2013-03-13 18:19:04 | 000,137,621 | ---- | C] () -- C:\windows\SysNative\Gfxres.sl-SI.resources
[2013-03-13 18:19:04 | 000,137,519 | ---- | C] () -- C:\windows\SysNative\Gfxres.nb-NO.resources
[2013-03-13 18:19:04 | 000,136,873 | ---- | C] () -- C:\windows\SysNative\Gfxres.da-DK.resources
[2013-03-13 18:19:04 | 000,132,360 | ---- | C] () -- C:\windows\SysNative\Gfxres.en-US.resources
[2013-03-13 18:19:04 | 000,126,035 | ---- | C] () -- C:\windows\SysNative\Gfxres.zh-TW.resources
[2013-03-13 18:19:04 | 000,124,403 | ---- | C] () -- C:\windows\SysNative\Gfxres.zh-CN.resources
[2013-03-13 18:19:04 | 000,094,208 | ---- | C] () -- C:\windows\SysNative\IccLibDll_x64.dll
[2013-03-13 18:19:04 | 000,000,255 | ---- | C] () -- C:\windows\SysNative\GfxUI.exe.config
[2012-10-11 10:47:49 | 000,083,968 | ---- | C] () -- C:\windows\SysWow64\OEMLicense.dll
[2012-07-26 02:13:10 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat
[2012-07-26 02:13:09 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT
[2012-07-26 01:21:26 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
[2012-07-25 19:17:42 | 000,043,520 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll
[2012-07-25 14:37:29 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
[2012-07-25 14:28:31 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll
[2012-07-25 14:22:56 | 000,267,284 | ---- | C] () -- C:\windows\SysWow64\igvpkrng600.bin
[2012-07-25 14:22:54 | 000,963,376 | ---- | C] () -- C:\windows\SysWow64\igcodeckrng600.bin
[2012-06-02 08:31:19 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat
[2012-04-20 14:59:44 | 000,001,536 | ---- | C] () -- C:\windows\SysWow64\IusEventLog.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2013-05-17 21:03:50 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\windows\SysNative\shell32.dll -- [2013-03-06 00:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-03-05 23:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\windows\SysNative\wbem\fastprox.dll -- [2012-07-25 21:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-25 21:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\windows\SysNative\wbem\wbemess.dll -- [2012-07-25 21:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2013-05-08 08:09:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2013-05-17 22:40:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Autodesk
[2013-05-08 07:53:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bluetooth Suite
[2013-07-17 23:45:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2013-05-23 17:03:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Conduit
[2013-07-04 08:33:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CounterPath
[2013-05-17 16:55:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CStart8
[2013-05-08 08:06:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cyberlink
[2013-07-08 10:56:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2013-05-08 07:45:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dolby Advanced Audio v2
[2013-05-17 22:20:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DWG TrueView 2013
[2013-08-28 14:11:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ESET
[2013-07-15 13:31:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Feven
[2013-06-24 07:49:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2013-07-08 11:02:38 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2013-05-08 08:13:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2013-07-11 20:22:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2013-07-08 11:02:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lenovo
[2013-05-21 15:55:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2013-05-21 15:55:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
[2013-05-21 15:52:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2013-05-21 16:33:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2013-05-21 15:55:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2013-05-19 16:41:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MpcStar
[2013-05-21 15:55:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2013-06-24 16:42:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MyPC Backup
[2013-05-08 07:49:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Qualcomm Atheros
[2013-06-30 09:27:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Real
[2013-06-30 09:27:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\RealNetworks
[2013-05-08 07:45:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2012-10-11 10:41:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2013-06-24 07:54:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SketchUp
[2013-07-17 10:20:36 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2013-05-08 08:07:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SugarSync
[2013-05-18 13:07:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TornTV.com
[2013-05-08 07:51:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\USB Camera
[2013-05-08 07:51:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Vimicro
[2013-05-21 15:58:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2013-05-17 21:10:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2013-05-17 21:10:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2012-07-26 02:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2012-07-26 02:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2013-06-20 07:25:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2012-07-26 02:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2012-07-26 02:12:59 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
 
[color=#A23BEC]< %userprofile%\Desktop\*.* >[/color]
[2013-07-23 17:11:02 | 000,350,467 | ---- | M] () -- C:\Users\Krasimira\Desktop\2013 Q2.pdf
[2013-06-24 07:42:25 | 000,001,195 | ---- | M] () -- C:\Users\Krasimira\Desktop\Bandizip.lnk
[2013-08-28 10:37:58 | 004,421,008 | ---- | M] () -- C:\Users\Krasimira\Desktop\Doc1.docx
[2013-08-30 11:56:04 | 000,086,806 | ---- | M] () -- C:\Users\Krasimira\Desktop\Extras.Txt
[2013-08-30 11:36:19 | 000,042,756 | ---- | M] () -- C:\Users\Krasimira\Desktop\forum.docx
[2013-06-29 21:25:25 | 072,099,420 | ---- | M] () -- C:\Users\Krasimira\Desktop\Google SketchUp Pro 8.0.4811 incl crack-serials(www.pkgames.net).rar
[2013-08-29 08:41:40 | 000,011,398 | ---- | M] () -- C:\Users\Krasimira\Desktop\help otl.docx
[2013-08-29 10:52:27 | 260,038,464 | ---- | M] (Kaspersky Lab) -- C:\Users\Krasimira\Desktop\kis14.0.0.4651aEN_4879.exe
[2013-07-27 07:41:02 | 000,013,689 | ---- | M] () -- C:\Users\Krasimira\Desktop\Microsoft Office 2007 Enterprise UG VL DVD-ZWTiSO.torrent
[2013-08-30 11:35:05 | 000,015,528 | ---- | M] () -- C:\Users\Krasimira\Desktop\my otl fix-1.docx
[2013-08-28 15:56:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Krasimira\Desktop\OTL.exe
[2013-08-30 11:55:28 | 000,171,462 | ---- | M] () -- C:\Users\Krasimira\Desktop\OTL.Txt
[2013-08-28 15:50:38 | 000,139,264 | ---- | M] () -- C:\Users\Krasimira\Desktop\SystemLook.exe
[2013-08-30 11:43:46 | 000,000,600 | ---- | M] () -- C:\Users\Krasimira\Desktop\SystemLook.txt
[2013-08-30 11:42:05 | 000,000,162 | -H-- | M] () -- C:\Users\Krasimira\Desktop\~$forum.docx
 
[color=#A23BEC]< %userprofile%\Desktop\*. >[/color]
[2013-07-25 12:31:06 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\documenti za bliznaci
[2013-05-28 17:24:01 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\FIRST YEAR
[2013-05-19 18:32:29 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\Friends - full serial
[2013-08-23 23:06:34 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\Musika
[2013-08-22 12:44:07 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\RESUMES
[2013-05-31 22:49:34 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\SECOND YEAR
[2013-08-23 23:06:27 | 000,000,000 | ---D | M] -- C:\Users\Krasimira\Desktop\snimki
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2013-08-27 21:03:17 | 000,000,000 | ---D | M](C:\Users\Krasimira\Desktop\???????) -- C:\Users\Krasimira\Desktop\рецепти
[2013-08-27 21:03:17 | 000,000,000 | ---D | M](C:\Users\Krasimira\Desktop\???????) -- C:\Users\Krasimira\Desktop\рецепти
[2013-06-04 18:11:42 | 000,000,000 | ---D | C](C:\Users\Krasimira\Desktop\???????) -- C:\Users\Krasimira\Desktop\рецепти
[2013-05-26 12:47:14 | 001,170,432 | ---- | C] ()(C:\Users\Krasimira\Desktop\? ???????????!!!!.exe) -- C:\Users\Krasimira\Desktop\С наступаюшим!!!!.exe
[2013-01-03 12:27:56 | 001,170,432 | ---- | M] ()(C:\Users\Krasimira\Desktop\? ???????????!!!!.exe) -- C:\Users\Krasimira\Desktop\С наступаюшим!!!!.exe

< End of report >