Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Moron
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 08 čer 2017 13:49

Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

#1 Příspěvek od Moron »

Dobrý den, prosím o pomoc a přikládam RSIT log. Na počítači co 10 vteřin vyskakuje okno o zachycení infekce Win32:Malware-gen Avastem v souboru C:\Windows\Tempmf364043343.exe. Test Avastem po restartu nic neřeší, kontrolováno Eset online skenerem, Malwarebytes, Eset smart security bez nálezu. Avg free tento soubor také detekuje. Combofix po 5 minutách běhu končí BSOD IRQ is not equal or less i v nouzovém režimu.

Děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by OÚ Choust at 2017-06-08 11:04:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 67 GB (88%) free of 76 GB
Total RAM: 958 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:04:15, on 8.6.2017
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\OpenCL\bin\x86\clang_compiler32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\VISO\UltracPAS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\OÚ Choust\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\OÚ Choust.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Rozhlas.lnk = C:\VISO\UltracPAS.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{3433D0F9-74A5-4C22-AD0E-1F544E2830BE}: NameServer = 192.168.0.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Network Connection (Netmans) - Unknown owner - C:\Program Files\K-Lite Codec Pack\Filters\LAV\LAVAudio.exe
O23 - Service: PEVSystemStart - Unknown owner - C:\ComboFix\pev.3XE

--
End of file - 4178 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Avast Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe -c

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla\Firefox\Profiles\1tzxh5ex.default

prefs.js - "browser.startup.homepage" - "http://www.volny.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 23.0.0.205 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_23_0_0_205.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla\Firefox\Profiles\1tzxh5ex.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-06-07 213824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-02-19 5503768]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TeamViewer8"=2
"MozillaMaintenance"=3
"gusvc"=3
"gupdatem"=3
"gupdate"=2

C:\Documents and Settings\OÚ Choust\Nabídka Start\Programy\Po spuštění
Rozhlas.lnk - C:\VISO\UltracPAS.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\VISO\UltracPAS.exe"="C:\VISO\UltracPAS.exe:*:Enabled:UltracPAS - připojení rozhlasu"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2017-06-08 11:04:09 ----D---- C:\rsit
2017-06-08 11:04:09 ----D---- C:\Program Files\trend micro
2017-06-08 10:57:42 ----A---- C:\WINDOWS\zip.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWXCACLS.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWSC.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\SWREG.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\sed.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\PEV.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\NIRCMD.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\MBR.exe
2017-06-08 10:57:42 ----A---- C:\WINDOWS\grep.exe
2017-06-08 10:57:38 ----SD---- C:\ComboFix
2017-06-08 10:48:12 ----A---- C:\WINDOWS\ntbtlog.txt
2017-06-07 23:30:31 ----SHD---- C:\WINDOWS\CSC
2017-06-07 16:04:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\AVAST Software
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswstmxp.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2017-06-07 16:01:43 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2017-06-07 16:01:37 ----A---- C:\WINDOWS\system32\aswBoot.exe
2017-06-07 15:41:59 ----SHD---- C:\Config.Msi
2017-06-07 15:28:43 ----N---- C:\WINDOWS\trz232.tmp
2017-06-07 14:34:37 ----N---- C:\WINDOWS\trz22E.tmp
2017-06-07 14:16:04 ----D---- C:\Program Files\AVG
2017-06-07 14:14:41 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2017-06-07 14:14:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avg
2017-06-07 12:04:58 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Google
2017-05-30 10:38:50 ----D---- C:\Qoobox
2017-05-30 10:38:12 ----D---- C:\WINDOWS\erdnt
2017-05-29 13:39:37 ----D---- C:\WINDOWS\system32\xircom
2017-05-29 13:04:38 ----D---- C:\WINDOWS\WinSxS
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Web
2017-05-29 13:04:38 ----D---- C:\WINDOWS\twain_32
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Temp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\wins
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\wbem
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\usmt
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\spool
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ShellExt
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\Setup
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ras
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\oobe
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\npp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\mui
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\inetsrv
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\IME
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\icsxml
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\ias
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\export
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers\etc
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers\disdn
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\drivers
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\dllcache
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\dhcp
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\config
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\3com_dmi
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\3076
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\2052
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1054
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1042
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1041
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1037
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1033
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1031
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1029
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1028
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32\1025
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system32
2017-05-29 13:04:38 ----D---- C:\WINDOWS\system
2017-05-29 13:04:38 ----D---- C:\WINDOWS\security
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Resources
2017-05-29 13:04:38 ----D---- C:\WINDOWS\repair
2017-05-29 13:04:38 ----D---- C:\WINDOWS\mui
2017-05-29 13:04:38 ----D---- C:\WINDOWS\msapps
2017-05-29 13:04:38 ----D---- C:\WINDOWS\msagent
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Media
2017-05-29 13:04:38 ----D---- C:\WINDOWS\java
2017-05-29 13:04:38 ----D---- C:\WINDOWS\inf
2017-05-29 13:04:38 ----D---- C:\WINDOWS\ime
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Help
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Fonts
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Driver Cache
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Debug
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Cursors
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Connection Wizard
2017-05-29 13:04:38 ----D---- C:\WINDOWS\Config
2017-05-29 13:04:38 ----D---- C:\WINDOWS\AppPatch
2017-05-29 13:04:38 ----D---- C:\WINDOWS\addins
2017-05-29 13:04:38 ----D---- C:\WINDOWS
2017-05-29 13:04:38 ----ASH---- C:\pagefile.sys
2017-05-29 12:28:15 ----A---- C:\NTDETECT.COM
2017-05-29 12:28:15 ----A---- C:\MSDOS.SYS
2017-05-29 12:28:15 ----A---- C:\IO.SYS
2017-05-29 12:28:15 ----A---- C:\CONFIG.SYS
2017-05-29 12:28:14 ----A---- C:\boot.ini
2017-05-29 12:28:14 ----A---- C:\AUTOEXEC.BAT
2017-05-29 11:55:50 ----D---- C:\Zaloha
2017-05-29 11:55:50 ----A---- C:\WINDOWS\winhlp32.exe
2017-05-29 11:55:50 ----A---- C:\WINDOWS\WINCMD.INI
2017-05-29 11:55:50 ----A---- C:\WINDOWS\vbaddin.ini
2017-05-29 11:55:49 ----A---- C:\WINDOWS\vb.ini
2017-05-29 11:55:49 ----A---- C:\WINDOWS\ucrtbase.dll
2017-05-29 11:55:48 ----A---- C:\WINDOWS\tcburner.ini
2017-05-29 11:55:48 ----A---- C:\WINDOWS\TASKMAN.EXE
2017-05-29 11:55:48 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2017-05-29 11:55:48 ----A---- C:\WINDOWS\smscfg.ini
2017-05-29 11:55:48 ----A---- C:\WINDOWS\slrundll.exe
2017-05-29 11:55:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2017-05-29 11:55:48 ----A---- C:\WINDOWS\ODBCINST.INI
2017-05-29 11:55:48 ----A---- C:\WINDOWS\notepad.exe
2017-05-29 11:55:48 ----A---- C:\WINDOWS\IsUninst.exe
2017-05-29 11:55:47 ----A---- C:\WINDOWS\desktop.ini
2017-05-29 11:55:47 ----A---- C:\WINDOWS\control.ini
2017-05-29 11:55:47 ----A---- C:\WINDOWS\bootstat.dat
2017-05-29 11:55:47 ----A---- C:\WINDOWS\avastSS.scr
2017-05-29 11:55:34 ----D---- C:\WINDOWS\WBEM
2017-05-29 11:55:33 ----D---- C:\WINDOWS\Tasks
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\zipfldr.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsshhdr.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpsp1res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xpob2res.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xp_eos.exe
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xolehlp.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmlprovi.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmlprov.dll
2017-05-29 11:55:33 ----A---- C:\WINDOWS\system32\xmllite.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\xenroll.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2017-05-29 11:55:32 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2017-05-29 11:55:31 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2017-05-29 11:55:30 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactsrv.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2017-05-29 11:55:29 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2017-05-29 11:55:28 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2017-05-29 11:55:27 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2017-05-29 11:55:26 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2017-05-29 11:55:25 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcsvc.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcsapi.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wzcdlg.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuweb.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wups2.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wups.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wucltui.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuauserv.dll
2017-05-29 11:55:24 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-05-29 11:55:23 ----A---- C:\WINDOWS\system32\wsnmp32.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wship6.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wshbth.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wsecedit.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wscsvc.dll
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wscntfy.exe
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\write.exe
2017-05-29 11:55:22 ----A---- C:\WINDOWS\system32\wpa.bak
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmvdmod.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmstream.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmspdmod.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmoe.dll
2017-05-29 11:55:21 ----A---- C:\WINDOWS\system32\wmsdmod.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpui.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmphoto.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpcd.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmpasf.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmp.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\WMNetmgr.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmidx.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmerror.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmadmoe.dll
2017-05-29 11:55:20 ----A---- C:\WINDOWS\system32\wmadmod.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\wlanapi.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\winshfhc.dll
2017-05-29 11:55:19 ----A---- C:\WINDOWS\system32\winmine.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winchat.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\WinFXDocObj.exe
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\windowscodecsext.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\windowscodecs.dll
2017-05-29 11:55:18 ----A---- C:\WINDOWS\system32\winbrand.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wiaservc.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wiadss.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\WgaTray.exe
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\wextract.exe
2017-05-29 11:55:17 ----A---- C:\WINDOWS\system32\webvw.dll
2017-05-29 11:55:16 ----A---- C:\WINDOWS\system32\w3ssl.dll
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTuninst.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTTrayp.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTTimer.exe
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTovrlay.dll
2017-05-29 11:55:15 ----A---- C:\WINDOWS\system32\VTInfo2.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\vticd.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\VTGamma2.dll
2017-05-29 11:55:14 ----A---- C:\WINDOWS\system32\VTDisply.dll
2017-05-29 11:55:13 ----A---- C:\WINDOWS\system32\vtdisp.dll
2017-05-29 11:55:13 ----A---- C:\WINDOWS\system32\VModes.exe
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\verclsid.exe
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\vdmredir.dll
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-05-29 11:55:12 ----A---- C:\WINDOWS\system32\utilman.exe
2017-05-29 11:55:10 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\usp10.dll
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\usbui.dll
2017-05-29 11:55:09 ----A---- C:\WINDOWS\system32\ups.exe
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnpui.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnphost.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\upnp.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\untfs.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\umandlg.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2017-05-29 11:55:08 ----A---- C:\WINDOWS\system32\udhisapi.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tzchange.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\twext.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tspkg.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tslabels.ini
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tskill.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsgqec.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscon.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tracert.exe
2017-05-29 11:55:07 ----A---- C:\WINDOWS\system32\tracerpt.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsvrp.dll
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsvr.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntsess.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\tlntadmn.exe
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\termsrv.dll
2017-05-29 11:55:06 ----A---- C:\WINDOWS\system32\telnet.exe
2017-05-29 11:55:05 ----A---- C:\WINDOWS\system32\taskmgr.exe
2017-05-29 11:55:05 ----A---- C:\WINDOWS\system32\tapisrv.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\strmfilt.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\storprop.dll
2017-05-29 11:55:04 ----A---- C:\WINDOWS\system32\stclient.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srsvc.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2017-05-29 11:55:03 ----A---- C:\WINDOWS\system32\srclient.dll
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spxcoins.dll
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spupdwxp.exe
2017-05-29 11:55:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2017-05-29 11:55:01 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spnpinst.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spmsg.dll
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spider.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sol.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sndvol32.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\sndrec32.exe
2017-05-29 11:55:01 ----A---- C:\WINDOWS\system32\smtpapi.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\smbinst.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slserv.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slrundll.exe
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slgen.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slextspk.dll
2017-05-29 11:55:00 ----A---- C:\WINDOWS\system32\slcoinst.dll
2017-05-29 11:54:59 ----A---- C:\WINDOWS\system32\shadow.exe
2017-05-29 11:54:58 ----A---- C:\WINDOWS\system32\setupn.exe
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\sessmgr.exe
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\servdeps.dll
2017-05-29 11:54:57 ----A---- C:\WINDOWS\system32\sdhcinst.dll
2017-05-29 11:54:56 ----A---- C:\WINDOWS\system32\schedsvc.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrslv.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrdm.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\s3gnb.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\rwnh.dll
2017-05-29 11:54:55 ----A---- C:\WINDOWS\system32\rwinsta.exe
2017-05-29 11:54:54 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2017-05-29 11:54:54 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\rgb9rast_2.dll
2017-05-29 11:54:53 ----A---- C:\WINDOWS\system32\reset.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\remotepg.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\regini.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdshost.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpclip.exe
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2017-05-29 11:54:52 ----A---- C:\WINDOWS\system32\rdchost.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\rasqec.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\racpldlg.dll
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
2017-05-29 11:54:51 ----A---- C:\WINDOWS\system32\qutil.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qprocess.exe
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qmgr.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qcliprov.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qagentrt.dll
2017-05-29 11:54:50 ----A---- C:\WINDOWS\system32\qagent.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\prntvpt.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2017-05-29 11:54:49 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\powercfg.exe
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\photometadatahandler.dll
2017-05-29 11:54:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-29 11:54:47 ----A---- C:\WINDOWS\system32\p2psvc.dll
2017-05-29 11:54:47 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2pgraph.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2pgasvc.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\p2p.dll
2017-05-29 11:54:46 ----A---- C:\WINDOWS\system32\onex.dll
2017-05-29 11:54:45 ----A---- C:\WINDOWS\system32\OEMINFO.INI
2017-05-29 11:54:43 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2017-05-29 11:54:43 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-05-29 11:54:42 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\normaliz.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\NmUninst.exe
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2017-05-29 11:54:41 ----A---- C:\WINDOWS\system32\nlsdl.dll
2017-05-29 11:54:40 ----A---- C:\WINDOWS\system32\netfxperf.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napstat.exe
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napmontr.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\napipsec.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxparhd.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxoci.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxex.dll
2017-05-29 11:54:39 ----A---- C:\WINDOWS\system32\mtxdm.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxml6r.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-05-29 11:54:38 ----A---- C:\WINDOWS\system32\msxbde40.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\msvcr100.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2017-05-29 11:54:37 ----A---- C:\WINDOWS\system32\msvcp100.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\msutb.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstsc.exe
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstext40.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mstask.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\msshavmsg.dll
2017-05-29 11:54:36 ----A---- C:\WINDOWS\system32\mssha.dll
2017-05-29 11:54:35 ----A---- C:\WINDOWS\system32\msrepl40.dll
2017-05-29 11:54:35 ----A---- C:\WINDOWS\system32\msrd2x40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspbde40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msoert2.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msoeacct.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msltus40.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\mslbui.dll
2017-05-29 11:54:34 ----A---- C:\WINDOWS\system32\msimtf.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\mshearts.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msg.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msexch40.dll
2017-05-29 11:54:32 ----A---- C:\WINDOWS\system32\msexcl40.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtctm.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtclog.dll
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdtc.exe
2017-05-29 11:54:31 ----A---- C:\WINDOWS\system32\msdbg2.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msdadiag.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msctfp.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msctf.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscories.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscorier.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\mscoree.dll
2017-05-29 11:54:30 ----A---- C:\WINDOWS\system32\msconf.dll
2017-05-29 11:54:25 ----A---- C:\WINDOWS\system32\MRT.exe
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mplay32.exe
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
2017-05-29 11:54:23 ----A---- C:\WINDOWS\system32\mp43dmod.dll
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mnmdd.dll
2017-05-29 11:54:22 ----A---- C:\WINDOWS\system32\mmfutil.dll
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcperf.exe
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcfxcommon.dll
2017-05-29 11:54:21 ----A---- C:\WINDOWS\system32\mmcex.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\MFC71.dll
2017-05-29 11:54:20 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2017-05-29 11:54:19 ----A---- C:\WINDOWS\system32\mapi32.dll
2017-05-29 11:54:18 ----A---- C:\WINDOWS\system32\logoff.exe
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\licwmi.dll
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2017-05-29 11:54:17 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\ksuser.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kmsvc.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbdycl.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbdycc.dll
2017-05-29 11:54:16 ----A---- C:\WINDOWS\system32\kbduzb.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdur.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdukx.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtuq.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtuf.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdtat.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsmsno.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsmsfi.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdsl.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdru1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdru.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdro.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpl.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdpash.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdno1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdnepr.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmon.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmlt48.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmlt47.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdmaori.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlv1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlv.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlt1.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdlt.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdkyr.dll
2017-05-29 11:54:15 ----A---- C:\WINDOWS\system32\kbdkaz.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdiultn.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinmal.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinben.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdinbe1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhu.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhept.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhela3.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhela2.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe319.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe220.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdhe.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdgkl.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdfi1.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdest.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdcr.dll
2017-05-29 11:54:14 ----A---- C:\WINDOWS\system32\kbdbu.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdblr.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdbhc.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdazel.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\kbdaze.dll
2017-05-29 11:54:13 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\isign32.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\irclass.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_qcx.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_qc.dll
2017-05-29 11:54:12 ----A---- C:\WINDOWS\system32\ir50_32.dll
2017-05-29 11:54:11 ----A---- C:\WINDOWS\system32\ir41_qcx.dll
2017-05-29 11:54:11 ----A---- C:\WINDOWS\system32\ir41_qc.dll
2017-05-29 11:54:10 ----A---- C:\WINDOWS\system32\infocardapi.dll
2017-05-29 11:54:10 ----A---- C:\WINDOWS\system32\inetres.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\inetcomm.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\inetcfg.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ils.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ieui.dll
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\ieudinit.exe
2017-05-29 11:54:09 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-05-29 11:54:08 ----A---- C:\WINDOWS\system32\ieapfltr.dat
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\idndl.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icwphbk.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icwdial.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardres.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardie.dll
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icardagt.exe
2017-05-29 11:54:07 ----A---- C:\WINDOWS\system32\icaapi.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\iacenc.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hypertrm.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\httpapi.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hticons.dll
2017-05-29 11:54:06 ----A---- C:\WINDOWS\system32\hsfcisp2.dll
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\hccoin.dll
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\HAL.DLL
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\h323log.txt
2017-05-29 11:54:05 ----A---- C:\WINDOWS\system32\getuname.dll
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fwcfg.dll
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fsquirt.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\freecell.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fltmc.exe
2017-05-29 11:54:04 ----A---- C:\WINDOWS\system32\fltlib.dll
2017-05-29 11:54:03 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2017-05-29 11:54:03 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\faxpatch.exe
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\extmgr.dll
2017-05-29 11:54:02 ----A---- C:\WINDOWS\system32\evr.dll
2017-05-29 11:54:01 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2017-05-29 11:54:01 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapsvc.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapqec.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappprxy.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapphost.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappgnui.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eappcfg.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\eapolqec.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\dxva2.dll
2017-05-29 11:54:00 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2017-05-29 11:53:58 ----A---- C:\WINDOWS\system32\dot3ui.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3svc.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3msm.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3gpclnt.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3dlg.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3cfg.dll
2017-05-29 11:53:57 ----A---- C:\WINDOWS\system32\dot3api.dll
2017-05-29 11:53:56 ----A---- C:\WINDOWS\system32\dimsroam.dll
2017-05-29 11:53:56 ----A---- C:\WINDOWS\system32\dimsntfy.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dhcpqec.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dgsetup.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\dfshim.dll
2017-05-29 11:53:55 ----A---- C:\WINDOWS\system32\desktop.ini
2017-05-29 11:53:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2017-05-29 11:53:53 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2017-05-29 11:53:52 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2017-05-29 11:53:52 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2017-05-29 11:53:51 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2017-05-29 11:53:50 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2017-05-29 11:53:50 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2017-05-29 11:53:49 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2017-05-29 11:53:48 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2017-05-29 11:53:48 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2017-05-29 11:53:47 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2017-05-29 11:53:47 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2017-05-29 11:53:46 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2017-05-29 11:53:45 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2017-05-29 11:53:44 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2017-05-29 11:53:43 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2017-05-29 11:53:43 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2017-05-29 11:53:42 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2017-05-29 11:53:41 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2017-05-29 11:53:40 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2017-05-29 11:53:40 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2017-05-29 11:53:39 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2017-05-29 11:53:38 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2017-05-29 11:53:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2017-05-29 11:53:37 ----A---- C:\WINDOWS\system32\ctfmon.exe
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\credssp.dll
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\CONFIG.TMP
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\comuid.dll
2017-05-29 11:53:36 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comsnap.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comsdupd.exe
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comrepl.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\comaddin.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\colbact.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\cmsetacl.dll
2017-05-29 11:53:35 ----A---- C:\WINDOWS\system32\cmprops.dll
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clipbrd.exe
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clbcatq.dll
2017-05-29 11:53:34 ----A---- C:\WINDOWS\system32\clbcatex.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\charmap.exe
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\cdmodem.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrvut.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrvps.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\catsrv.dll
2017-05-29 11:53:33 ----A---- C:\WINDOWS\system32\calc.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\btpanui.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bthserv.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bthci.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\browserchoice.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\blastcln.exe
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2017-05-29 11:53:32 ----A---- C:\WINDOWS\system32\batt.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\azroles.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avwav.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avtapi.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\avmeter.dll
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\auditusr.exe
2017-05-29 11:53:31 ----A---- C:\WINDOWS\system32\atrace.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati3duag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2dvaa.dll
2017-05-29 11:53:30 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\accwiz.exe
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\acctres.dll
2017-05-29 11:53:27 ----A---- C:\WINDOWS\system32\aaclient.dll
2017-05-29 11:53:26 ----D---- C:\WINDOWS\system32\XPSViewer
2017-05-29 11:53:16 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2017-05-29 11:53:14 ----D---- C:\WINDOWS\system32\Restore
2017-05-29 11:53:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2017-05-29 11:53:12 ----D---- C:\WINDOWS\system32\PreInstall
2017-05-29 11:53:07 ----D---- C:\WINDOWS\system32\MsDtc
2017-05-29 11:53:06 ----D---- C:\WINDOWS\system32\Microsoft
2017-05-29 11:53:01 ----D---- C:\WINDOWS\system32\Macromed
2017-05-29 11:53:01 ----D---- C:\WINDOWS\system32\LogFiles
2017-05-29 11:53:00 ----D---- C:\WINDOWS\system32\en-US
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wdf01000.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\watv10nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\watv06nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\wacompen.sys
2017-05-29 11:53:00 ----A---- C:\WINDOWS\system32\drivers\vtmini.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viamraid.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viaide.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\vchnt5.dll
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2017-05-29 11:52:59 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\tape.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2017-05-29 11:52:58 ----A---- C:\WINDOWS\system32\drivers\staport.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\smbali.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slnthal.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slntamr.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\slnt7554.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sisagp.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\siint5.dll
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys
2017-05-29 11:52:57 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\recagent.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2017-05-29 11:52:56 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2017-05-29 11:52:55 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2017-05-29 11:52:55 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-05-29 11:52:54 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2017-05-29 11:52:54 ----A---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mutohpen.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2017-05-29 11:52:53 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\irbus.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2017-05-29 11:52:52 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidir.sys
2017-05-29 11:52:51 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fetnd5b.sys
2017-05-29 11:52:50 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\Dot4Prt.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\dot4.sys
2017-05-29 11:52:49 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthusb.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthprint.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthmodem.sys
2017-05-29 11:52:48 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atintuxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinttxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2017-05-29 11:52:47 ----A---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinraxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2017-05-29 11:52:46 ----A---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2017-05-29 11:52:45 ----A---- C:\WINDOWS\system32\drivers\amdagp.sys
2017-05-29 11:52:45 ----A---- C:\WINDOWS\system32\drivers\alim1541.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\agpcpq.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\agp440.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2017-05-29 11:52:44 ----A---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2017-05-29 11:52:43 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2017-05-29 11:50:28 ----D---- C:\WINDOWS\system32\DirectX
2017-05-29 11:50:27 ----D---- C:\WINDOWS\system32\cs-cz
2017-05-29 11:50:27 ----D---- C:\WINDOWS\system32\cs
2017-05-29 11:50:13 ----D---- C:\WINDOWS\system32\Com
2017-05-29 11:50:13 ----D---- C:\WINDOWS\system32\CatRoot2
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\CatRoot
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\bits
2017-05-29 11:50:08 ----D---- C:\WINDOWS\system32\appmgmt
2017-05-29 11:50:05 ----D---- C:\WINDOWS\srchasst
2017-05-29 11:50:05 ----D---- C:\WINDOWS\SoftwareDistribution
2017-05-29 11:45:14 ----D---- C:\WINDOWS\ServicePackFiles
2017-05-29 11:45:12 ----D---- C:\WINDOWS\Registration
2017-05-29 11:45:11 ----D---- C:\WINDOWS\pss
2017-05-29 11:45:11 ----D---- C:\WINDOWS\Provisioning
2017-05-29 11:45:09 ----D---- C:\WINDOWS\Prefetch
2017-05-29 11:45:09 ----D---- C:\WINDOWS\PeerNet
2017-05-29 11:44:55 ----D---- C:\WINDOWS\pchealth
2017-05-29 11:44:55 ----D---- C:\WINDOWS\Offline Web Pages
2017-05-29 11:44:55 ----D---- C:\WINDOWS\OemDir
2017-05-29 11:44:55 ----D---- C:\WINDOWS\network diagnostic
2017-05-29 11:44:53 ----D---- C:\WINDOWS\Minidump
2017-05-29 11:44:35 ----D---- C:\WINDOWS\Microsoft.NET
2017-05-29 11:44:33 ----D---- C:\WINDOWS\l2schemas
2017-05-29 11:44:15 ----SHD---- C:\WINDOWS\Installer
2017-05-29 11:43:02 ----D---- C:\WINDOWS\ie8updates
2017-05-29 11:42:46 ----D---- C:\WINDOWS\ie8
2017-05-29 11:42:32 ----D---- C:\WINDOWS\ie7
2017-05-29 11:42:10 ----D---- C:\WINDOWS\ehome
2017-05-29 11:42:01 ----D---- C:\WINDOWS\Downloaded Program Files
2017-05-29 11:41:29 ----D---- C:\WINDOWS\assembly
2017-05-29 11:40:38 ----D---- C:\WINDOWS\$hf_mig$
2017-05-29 11:38:37 ----D---- C:\VISO
2017-05-29 11:38:37 ----D---- C:\UFAND40
2017-05-29 11:38:37 ----D---- C:\UFAND33
2017-05-29 11:38:34 ----D---- C:\TRIADA
2017-05-29 11:37:25 ----SHD---- C:\System Volume Information
2017-05-29 11:37:25 ----D---- C:\Program Files\xerox
2017-05-29 11:37:22 ----D---- C:\Program Files\Windows NT
2017-05-29 11:37:19 ----D---- C:\Program Files\Windows Media Player
2017-05-29 11:37:07 ----D---- C:\Program Files\TotalCmd
2017-05-29 11:36:59 ----D---- C:\Program Files\TeamViewer
2017-05-29 11:36:56 ----D---- C:\Program Files\Speccy
2017-05-29 11:36:56 ----D---- C:\Program Files\S3
2017-05-29 11:36:49 ----D---- C:\Program Files\Reference Assemblies
2017-05-29 11:36:47 ----D---- C:\Program Files\Outlook Express
2017-05-29 11:36:46 ----D---- C:\Program Files\OpenOffice.org 2.0
2017-05-29 11:36:46 ----D---- C:\Program Files\Online Services
2017-05-29 11:36:43 ----D---- C:\Program Files\NetMeeting
2017-05-29 11:36:39 ----D---- C:\Program Files\MSN Gaming Zone
2017-05-29 11:36:39 ----D---- C:\Program Files\MSBuild
2017-05-29 11:36:39 ----D---- C:\Program Files\Mozilla Maintenance Service
2017-05-29 11:36:05 ----D---- C:\Program Files\Mozilla Firefox
2017-05-29 11:36:03 ----D---- C:\Program Files\Movie Maker
2017-05-29 11:35:55 ----D---- C:\Program Files\Microsoft Updates
2017-05-29 11:35:55 ----D---- C:\Program Files\microsoft frontpage
2017-05-29 11:35:54 ----D---- C:\Program Files\Messenger
2017-05-29 11:32:44 ----D---- C:\Program Files\LibreOffice 4
2017-05-29 11:32:43 ----D---- C:\Program Files\K-Lite Codec Pack
2017-05-29 11:32:39 ----D---- C:\Program Files\Internet Explorer
2017-05-29 11:32:39 ----D---- C:\Program Files\Intel
2017-05-29 11:32:39 ----D---- C:\Program Files\GUM241E.tmp
2017-05-29 11:31:40 ----D---- C:\Program Files\Google
2017-05-29 11:31:36 ----D---- C:\Program Files\Dropbox
2017-05-29 11:31:33 ----D---- C:\Program Files\Defraggler
2017-05-29 11:31:27 ----D---- C:\Program Files\Common Files\System
2017-05-29 11:31:26 ----D---- C:\Program Files\Common Files\SpeechEngines
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\Services
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\ODBC
2017-05-29 11:31:25 ----D---- C:\Program Files\Common Files\MSSoap
2017-05-29 11:31:20 ----D---- C:\Program Files\Common Files\Microsoft Shared
2017-05-29 11:31:18 ----D---- C:\Program Files\Common Files\Adobe
2017-05-29 11:31:18 ----D---- C:\Program Files\Common Files
2017-05-29 11:30:59 ----D---- C:\Program Files\CDex_150
2017-05-29 11:30:57 ----D---- C:\Program Files\CCleaner
2017-05-29 11:28:55 ----D---- C:\Program Files\AVAST Software
2017-05-29 11:28:49 ----D---- C:\Program Files\Auslogics
2017-05-29 11:28:49 ----D---- C:\Program Files\Alwil Software
2017-05-29 11:28:26 ----D---- C:\Program Files\Adobe
2017-05-29 11:28:26 ----D---- C:\Program Files
2017-05-29 11:27:21 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\TeamViewer
2017-05-29 11:27:21 ----A---- C:\Documents and Settings\OÚ Choust\Data aplikací\desktop.ini
2017-05-29 11:27:19 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\OpenOffice.org2
2017-05-29 11:27:11 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Mozilla
2017-05-29 11:27:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Microsoft
2017-05-29 11:27:08 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Macromedia
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\LibreOffice
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Identities
2017-05-29 11:27:06 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\DropboxMaster
2017-05-29 11:26:56 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Dropbox
2017-05-29 11:26:55 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Auslogics
2017-05-29 11:26:54 ----D---- C:\Documents and Settings\OÚ Choust\Data aplikací\Adobe
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2017-05-29 11:26:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2017-05-29 11:26:51 ----A---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2017-05-29 11:23:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2017-05-29 11:23:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2017-05-29 11:23:45 ----D---- C:\Documents and Settings
2017-05-29 11:23:44 ----D---- C:\BAT

======List of files/folders modified in the last 1 month======

2017-06-07 23:34:21 ----A---- C:\WINDOWS\win.ini
2017-06-07 23:34:21 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-06-07 62152]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-06-07 279800]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]
R0 viamraid;viamraid; C:\WINDOWS\system32\drivers\viamraid.sys [2004-07-07 60672]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2017-06-07 60760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-06-07 764576]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-06-07 482608]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-04-16 12032]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-06-07 107928]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-04-19 2317504]
R3 aswStmXP;aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [2017-06-07 181080]
R3 Dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-13 206976]
R3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 mf;mf; C:\WINDOWS\system32\DRIVERS\mf.sys [2008-04-13 63744]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-08-24 237312]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-06-07 34136]
S3 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\OCHOUS~1\LOCALS~1\Temp\catchme.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-06-07 263304]
S2 Netmans;Network Connection; C:\Program Files\K-Lite Codec Pack\Filters\LAV\LAVAudio.exe [2017-05-14 66048]
S2 PEVSystemStart;PEVSystemStart; C:\ComboFix\pev.3XE [2011-06-26 256000]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-19 270936]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28 144200]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-09 194032]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2017-05-30 172488]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2014-08-04 5099360]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Moron
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 08 čer 2017 13:49

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

#3 Příspěvek od Moron »

Dobrý den,
zde je log:
# AdwCleaner v6.047 - Log vytvořen 14/06/2017 v 11:13:47
# Aktualizováno dne 19/05/2017 z Malwarebytes
# Databáze : 2017-05-19.1 [Místní]
# Operační systém : Microsoft Windows XP Service Pack 3 (X86)
# Uživatelské jméno : OÚ Choustník - MONT062426-3
# Spuštěno z : C:\Documents and Settings\OÚ Choustník\Plocha\adwcleaner_6.047.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Documents and Settings\All Users\Nabídka Start\Programy\Auslogics
[-] Složka smazána: C:\Program Files\Auslogics


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klíč smazán: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Klíč smazán: HKU\S-1-5-21-3335105372-952179842-3576758798-1005\Software\Auslogics
[#] Klíč smazán po restartu: HKCU\Software\Auslogics
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1817 Bajty] - [14/06/2017 11:13:47]
C:\AdwCleaner\AdwCleaner[S0].txt - [2226 Bajty] - [14/06/2017 11:10:45]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1963 Bajty] ##########

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Avast opakovaně detekuje Win32:Malware-gen v C:\Windows\

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět