prapodivné načítání profilu při spuštění pc

[Roli]

V první řadě bych PC zabezpečil, dále aktualizoval systém a nakonec ovladače.

Co se týče zbytečného software, tak samozřejmě odstavit, protože toho tam od výrobce bývá dost.

Pokud s tím chceš pomoct dej mi sem aktuální log z Rsit nebo HJT.

Ten samostatný oddíl už si asi neuděláš, protože ten se dělá při instalaci systému a i kdyby,

tak nevím co to provede s tou skrytou instalačkou.

[selkir]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Vitek at 2012-10-13 21:58:37
Microsoft Windows 7 Professional
System drive C: has 414 GB (90%) free of 459 GB
Total RAM: 3887 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:58:43, on 13.10.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\trend micro\Vitek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [estar] C:\System.Sav\Util\HideDOS.EXE C:\System.Sav\util\estartwk\twk764.bat
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: DEBridge - McAfee, Inc. - c:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe
O23 - Service: @c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP ProtectTools Service - Hewlett-Packard Development Company, L.P - c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP DayStarter Service (HPDayStarterService) - Hewlett-Packard Company - c:\Program Files (x86)\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - McAfee, Inc. - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12016 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe"
"c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\STacSV64.exe
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\Hpservice.exe
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 24038480
\??\C:\windows\system32\conhost.exe "-10767342781547613338160037580-10111631191311120160-2006424845-1057424351661522032
C:\windows\System32\spoolsv.exe
taskeng.exe {011362E9-B511-47AD-BFCC-BCA6775707D0}
"C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe"
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"c:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
"C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" /start
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\sppsvc.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
taskeng.exe {C017229C-B4C7-4C02-BA00-112D1B0B5D54}
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Bluetooth®: Off
WLAN: On</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_on.ico</IconPath><ID>876143773</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"
"C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" mode=windowless
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-436f4040-be0b-4bd3-8f49-567ecb42cf1a -SystemEventPortName:HostProcess-3ba370ad-86e1-47ca-a3d7-a4abfa781def -IoCancelEventPortName:HostProcess-77e151e5-a920-4bf9-8c4c-8166e03e28ec -NonStateChangingEventPortName:HostProcess-e7554a8d-0daf-4b8a-8c61-637c9cab6e66 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2fa93585-43ae-4e2c-8987-14824663eaca
taskhost.exe $(Arg0)
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
"C:\Users\Vitek\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\HPCeeScheduleForVitek.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
HP ProtectTools Security Manager Extension - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll [2010-04-02 2132232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
File Sanitizer for HP ProtectTools - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2010-01-19 117248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
HP ProtectTools Security Manager Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll [2010-04-02 1471752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-08-21 1501776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2010-01-08 186904]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2010-04-05 1691192]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 2174760]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-04-05 8192]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-04 196648]
""= []
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-04 483880]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-04-26 161304]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-04-26 386584]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-04-26 413208]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-03-17 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HPAdvisorDock"=C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [2010-02-10 1712184]
"Skype"=C:\Program Files (x86)\Skype\\Phone\Skype.exe [2009-10-09 25623336]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-02-22 2363392]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-03-01 256056]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2010-03-06 563736]
"File Sanitizer"=C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [2010-01-19 11266048]
"estar"=C:\System.Sav\Util\HideDOS.EXE [2006-11-29 77824]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2010-03-04 111640]
"NortonOnlineBackupReminder"=C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe [2009-12-03 3331944]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-04-21 269824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-10-13 21:58:38 ----D---- C:\Program Files\trend micro
2012-10-13 21:58:37 ----D---- C:\rsit
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\zh-TW
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\zh-CN
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\tr-TR
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\th-TH
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\sv-SE
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\ru-RU
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\ro-RO
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\pt-PT
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\pt-BR
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\pl-PL
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\nl-NL
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\nb-NO
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\ko-KR
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\ja-JP
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\it-IT
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\hu-HU
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\he-IL
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\fr-FR
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\fi-FI
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\es-ES
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\el-GR
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\de-DE
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\da-DK
2012-10-13 21:24:10 ----D---- C:\windows\system32\drivers\ar-SA
2012-10-13 21:24:10 ----D---- C:\Program Files (x86)\Windows Virtual PC
2012-10-13 21:23:59 ----A---- C:\windows\SYSWOW64\vmsal.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\vpchbuspipe.dll
2012-10-13 21:23:59 ----A---- C:\windows\system32\VPCWizard.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\VPCSettings.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\vpc.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\VMWindow.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\vmsal.exe
2012-10-13 21:23:59 ----A---- C:\windows\system32\VMCPropertyHandler.dll
2012-10-13 21:23:59 ----A---- C:\windows\system32\drivers\vpchbus.sys
2012-10-13 21:23:59 ----A---- C:\windows\system32\drivers\vpcusb.sys
2012-10-13 21:23:59 ----A---- C:\windows\system32\drivers\vpcnfltr.sys
2012-10-13 21:21:44 ----ASH---- C:\pagefile.sys
2012-10-13 21:21:32 ----SHD---- C:\System Volume Information
2012-10-13 20:37:51 ----D---- C:\windows\SoftwareDistribution
2012-10-13 20:33:22 ----D---- C:\windows\rescache
2012-10-13 20:30:16 ----D---- C:\Program Files\Common Files\Intel
2012-10-13 20:26:08 ----D---- C:\windows\Prefetch
2012-10-13 20:25:53 ----D---- C:\windows\CSC
2012-10-13 20:25:23 ----ASH---- C:\hiberfil.sys
2012-10-13 15:09:37 ----D---- C:\ProgramData\HP
2012-10-13 15:00:19 ----D---- C:\HP_RECOVERY_mountHPSF
2012-10-13 14:59:51 ----A---- C:\windows\system32\drivers\usbport.sys
2012-10-13 14:59:51 ----A---- C:\windows\system32\drivers\usbhub.sys
2012-10-13 14:59:51 ----A---- C:\windows\system32\drivers\usbehci.sys
2012-10-13 14:59:50 ----A---- C:\windows\system32\drivers\usbuhci.sys
2012-10-13 14:59:50 ----A---- C:\windows\system32\drivers\usbohci.sys
2012-10-13 14:59:50 ----A---- C:\windows\system32\drivers\usbd.sys
2012-10-13 14:59:50 ----A---- C:\windows\system32\drivers\usbccgp.sys
2012-10-13 14:59:45 ----A---- C:\windows\SYSWOW64\esent.dll
2012-10-13 14:59:45 ----A---- C:\windows\system32\esent.dll
2012-10-13 14:59:45 ----A---- C:\windows\system32\drivers\nvstor.sys
2012-10-13 14:59:45 ----A---- C:\windows\system32\drivers\nvraid.sys
2012-10-13 14:59:45 ----A---- C:\windows\system32\drivers\amdsata.sys
2012-10-13 14:59:44 ----A---- C:\windows\SYSWOW64\fsutil.exe
2012-10-13 14:59:44 ----A---- C:\windows\system32\fsutil.exe
2012-10-13 14:59:44 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2012-10-13 14:59:44 ----A---- C:\windows\system32\drivers\storport.sys
2012-10-13 14:59:44 ----A---- C:\windows\system32\drivers\iaStorV.sys
2012-10-13 14:59:44 ----A---- C:\windows\system32\drivers\amdxata.sys
2012-10-13 14:58:12 ----D---- C:\Users\Vitek\AppData\Roaming\Macromedia
2012-10-13 14:47:07 ----D---- C:\ProgramData\Norton
2012-10-13 14:46:17 ----D---- C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E}
2012-10-13 14:37:09 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-10-13 14:36:41 ----D---- C:\windows\SYSWOW64\Wat
2012-10-13 14:36:41 ----D---- C:\windows\system32\Wat
2012-10-13 14:36:12 ----A---- C:\windows\system32\FntCache.dll
2012-10-13 14:15:17 ----A---- C:\windows\system32\wcncsvc.dll
2012-10-13 14:15:16 ----A---- C:\windows\SYSWOW64\wcncsvc.dll
2012-10-13 14:06:29 ----A---- C:\windows\system32\MRT.exe
2012-10-13 13:25:30 ----A---- C:\windows\system32\drivers\sffp_sd.sys
2012-10-13 13:25:30 ----A---- C:\windows\system32\drivers\sdbus.sys
2012-10-13 13:19:19 ----A---- C:\windows\SYSWOW64\PresentationHostProxy.dll
2012-10-13 13:19:19 ----A---- C:\windows\SYSWOW64\PresentationHost.exe
2012-10-13 13:19:19 ----A---- C:\windows\SYSWOW64\netfxperf.dll
2012-10-13 13:19:19 ----A---- C:\windows\SYSWOW64\mscoree.dll
2012-10-13 13:19:19 ----A---- C:\windows\SYSWOW64\dfshim.dll
2012-10-13 13:19:19 ----A---- C:\windows\system32\PresentationHostProxy.dll
2012-10-13 13:19:19 ----A---- C:\windows\system32\PresentationHost.exe
2012-10-13 13:19:19 ----A---- C:\windows\system32\netfxperf.dll
2012-10-13 13:19:19 ----A---- C:\windows\system32\mscoree.dll
2012-10-13 13:19:19 ----A---- C:\windows\system32\dfshim.dll
2012-10-13 13:17:59 ----A---- C:\windows\system32\browserchoice.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\wininet.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\wextract.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\webcheck.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\vbscript.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\urlmon.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\url.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\occache.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\msrating.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\msls31.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\mshtml.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\mshta.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\jscript9.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\jscript.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\inseng.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\imgutil.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iexpress.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieui.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iesetup.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iertutil.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iernonce.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iepeers.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieframe.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieakui.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieaksie.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ieakeng.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\ie4uinit.exe
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\icardie.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2012-10-13 13:11:45 ----A---- C:\windows\SYSWOW64\admparse.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\wininet.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\wextract.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\webcheck.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\vbscript.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\urlmon.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\url.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\pngfilt.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\occache.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\msrating.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\msls31.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\mshtmler.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\mshtmled.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\mshtml.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\mshta.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\msfeedssync.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\msfeedsbs.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\msfeeds.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\licmgr10.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\jsproxy.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\jscript9.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\jscript.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\inseng.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\imgutil.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iexpress.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieUnatt.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieui.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iesysprep.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iesetup.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iertutil.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iernonce.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iepeers.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieframe.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\iedkcs32.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieapfltr.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieapfltr.dat
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieakui.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieaksie.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ieakeng.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\IEAdvpack.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\ie4uinit.exe
2012-10-13 13:11:45 ----A---- C:\windows\system32\icardie.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\dxtrans.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\dxtmsft.dll
2012-10-13 13:11:45 ----A---- C:\windows\system32\admparse.dll
2012-10-13 13:04:03 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2012-10-13 13:04:03 ----A---- C:\windows\system32\imagehlp.dll
2012-10-13 13:04:03 ----A---- C:\windows\system32\drivers\fs_rec.sys
2012-10-13 13:04:02 ----A---- C:\windows\SYSWOW64\wmi.dll
2012-10-13 13:04:02 ----A---- C:\windows\system32\wmi.dll
2012-10-13 13:02:23 ----A---- C:\windows\system32\drivers\usbvideo.sys
2012-10-13 13:02:23 ----A---- C:\windows\system32\drivers\ks.sys
2012-10-13 13:00:29 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2012-10-13 13:00:29 ----A---- C:\windows\system32\ntshrui.dll
2012-10-13 13:00:09 ----A---- C:\windows\SYSWOW64\tzres.dll
2012-10-13 13:00:09 ----A---- C:\windows\system32\tzres.dll
2012-10-13 12:59:24 ----A---- C:\windows\system32\KernelBase.dll
2012-10-13 12:59:23 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2012-10-13 12:59:23 ----A---- C:\windows\system32\wow64win.dll
2012-10-13 12:59:23 ----A---- C:\windows\system32\winsrv.dll
2012-10-13 12:59:23 ----A---- C:\windows\system32\kernel32.dll
2012-10-13 12:59:23 ----A---- C:\windows\system32\conhost.exe
2012-10-13 12:59:22 ----A---- C:\windows\SYSWOW64\kernel32.dll
2012-10-13 12:59:22 ----A---- C:\windows\system32\wow64.dll
2012-10-13 12:59:21 ----A---- C:\windows\SYSWOW64\setup16.exe
2012-10-13 12:59:20 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-13 12:59:20 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-10-13 12:59:20 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2012-10-13 12:59:20 ----A---- C:\windows\system32\wow64cpu.dll
2012-10-13 12:59:20 ----A---- C:\windows\system32\ntvdm64.dll
2012-10-13 12:59:19 ----A---- C:\windows\SYSWOW64\wow32.dll
2012-10-13 12:59:19 ----A---- C:\windows\SYSWOW64\instnm.exe
2012-10-13 12:59:18 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-13 12:59:18 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-10-13 12:59:17 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-10-13 12:59:16 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-10-13 12:59:15 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-10-13 12:59:15 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-10-13 12:59:15 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-10-13 12:59:15 ----A---- C:\windows\SYSWOW64\user.exe
2012-10-13 12:58:49 ----A---- C:\windows\system32\msdri.dll
2012-10-13 12:58:46 ----A---- C:\windows\system32\WMVDECOD.DLL
2012-10-13 12:58:45 ----A---- C:\windows\SYSWOW64\mf.dll
2012-10-13 12:58:45 ----A---- C:\windows\system32\mf.dll
2012-10-13 12:58:44 ----A---- C:\windows\system32\ExplorerFrame.dll
2012-10-13 12:58:43 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2012-10-13 12:58:43 ----A---- C:\windows\system32\mfreadwrite.dll
2012-10-13 12:58:43 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2012-10-13 12:58:43 ----A---- C:\windows\system32\cdd.dll
2012-10-13 12:58:42 ----A---- C:\windows\SYSWOW64\XpsRasterService.dll
2012-10-13 12:58:42 ----A---- C:\windows\SYSWOW64\mfreadwrite.dll
2012-10-13 12:58:42 ----A---- C:\windows\SYSWOW64\ExplorerFrame.dll
2012-10-13 12:58:42 ----A---- C:\windows\system32\XpsRasterService.dll
2012-10-13 12:58:42 ----A---- C:\windows\system32\mfps.dll
2012-10-13 12:58:42 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2012-10-13 12:58:14 ----A---- C:\windows\system32\ntoskrnl.exe
2012-10-13 12:58:13 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2012-10-13 12:58:12 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2012-10-13 12:58:08 ----A---- C:\windows\system32\upnp.dll
2012-10-13 12:58:07 ----A---- C:\windows\SYSWOW64\upnp.dll
2012-10-13 12:58:07 ----A---- C:\windows\system32\winhttp.dll
2012-10-13 12:58:06 ----A---- C:\windows\SYSWOW64\winhttp.dll
2012-10-13 12:58:06 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2012-10-13 12:58:06 ----A---- C:\windows\SYSWOW64\davclnt.dll
2012-10-13 12:58:06 ----A---- C:\windows\system32\wscapi.dll
2012-10-13 12:58:06 ----A---- C:\windows\system32\WebClnt.dll
2012-10-13 12:58:06 ----A---- C:\windows\system32\davclnt.dll
2012-10-13 12:58:05 ----A---- C:\windows\SYSWOW64\wscapi.dll
2012-10-13 12:58:05 ----A---- C:\windows\SYSWOW64\slwga.dll
2012-10-13 12:58:05 ----A---- C:\windows\system32\wscsvc.dll
2012-10-13 12:58:05 ----A---- C:\windows\system32\slwga.dll
2012-10-13 12:58:03 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2012-10-13 12:58:03 ----A---- C:\windows\system32\CPFilters.dll
2012-10-13 12:58:02 ----A---- C:\windows\system32\sbe.dll
2012-10-13 12:58:01 ----A---- C:\windows\SYSWOW64\sbe.dll
2012-10-13 12:57:59 ----A---- C:\windows\system32\mssrch.dll
2012-10-13 12:57:58 ----A---- C:\windows\SYSWOW64\mssrch.dll
2012-10-13 12:57:57 ----A---- C:\windows\SYSWOW64\tquery.dll
2012-10-13 12:57:57 ----A---- C:\windows\system32\tquery.dll
2012-10-13 12:57:57 ----A---- C:\windows\system32\SearchIndexer.exe
2012-10-13 12:57:56 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2012-10-13 12:57:56 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2012-10-13 12:57:56 ----A---- C:\windows\SYSWOW64\mssvp.dll
2012-10-13 12:57:56 ----A---- C:\windows\SYSWOW64\mssph.dll
2012-10-13 12:57:56 ----A---- C:\windows\system32\SearchProtocolHost.exe
2012-10-13 12:57:56 ----A---- C:\windows\system32\mssvp.dll
2012-10-13 12:57:56 ----A---- C:\windows\system32\mssph.dll
2012-10-13 12:57:55 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2012-10-13 12:57:55 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2012-10-13 12:57:55 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2012-10-13 12:57:55 ----A---- C:\windows\system32\SearchFilterHost.exe
2012-10-13 12:57:55 ----A---- C:\windows\system32\mssphtb.dll
2012-10-13 12:57:55 ----A---- C:\windows\system32\msscntrs.dll
2012-10-13 12:57:54 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2012-10-13 12:57:54 ----A---- C:\windows\system32\XpsPrint.dll
2012-10-13 12:57:53 ----A---- C:\windows\system32\schannel.dll
2012-10-13 12:57:52 ----A---- C:\windows\SYSWOW64\schannel.dll
2012-10-13 12:57:52 ----A---- C:\windows\system32\lsasrv.dll
2012-10-13 12:57:52 ----A---- C:\windows\system32\drivers\cng.sys
2012-10-13 12:57:51 ----A---- C:\windows\SYSWOW64\sspicli.dll
2012-10-13 12:57:51 ----A---- C:\windows\SYSWOW64\secur32.dll
2012-10-13 12:57:51 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2012-10-13 12:57:51 ----A---- C:\windows\system32\sspisrv.dll
2012-10-13 12:57:51 ----A---- C:\windows\system32\sspicli.dll
2012-10-13 12:57:51 ----A---- C:\windows\system32\secur32.dll
2012-10-13 12:57:51 ----A---- C:\windows\system32\ncrypt.dll
2012-10-13 12:57:51 ----A---- C:\windows\system32\lsass.exe
2012-10-13 12:57:51 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2012-10-13 12:57:51 ----A---- C:\windows\system32\drivers\ksecdd.sys
2012-10-13 12:57:40 ----A---- C:\windows\system32\d3d10warp.dll
2012-10-13 12:57:39 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2012-10-13 12:57:39 ----A---- C:\windows\SYSWOW64\d2d1.dll
2012-10-13 12:57:39 ----A---- C:\windows\system32\d2d1.dll
2012-10-13 12:57:38 ----A---- C:\windows\SYSWOW64\DWrite.dll
2012-10-13 12:57:38 ----A---- C:\windows\system32\DWrite.dll
2012-10-13 12:57:38 ----A---- C:\windows\system32\d3d10_1core.dll
2012-10-13 12:57:37 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2012-10-13 12:57:37 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2012-10-13 12:57:37 ----A---- C:\windows\system32\d3d10_1.dll
2012-10-13 12:57:35 ----A---- C:\windows\SYSWOW64\webio.dll
2012-10-13 12:57:35 ----A---- C:\windows\system32\webio.dll
2012-10-13 12:57:32 ----A---- C:\windows\system32\drivers\srv2.sys
2012-10-13 12:57:32 ----A---- C:\windows\system32\drivers\srv.sys
2012-10-13 12:57:31 ----A---- C:\windows\system32\drivers\srvnet.sys
2012-10-13 12:57:27 ----A---- C:\windows\system32\shell32.dll
2012-10-13 12:57:26 ----A---- C:\windows\SYSWOW64\shell32.dll
2012-10-13 12:57:24 ----A---- C:\windows\SYSWOW64\msxml6.dll
2012-10-13 12:57:24 ----A---- C:\windows\system32\msxml6.dll
2012-10-13 12:57:24 ----A---- C:\windows\system32\msxml3.dll
2012-10-13 12:57:23 ----A---- C:\windows\SYSWOW64\msxml3.dll
2012-10-13 12:57:18 ----A---- C:\windows\system32\drivers\tcpip.sys
2012-10-13 12:57:17 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2012-10-13 12:57:17 ----A---- C:\windows\SYSWOW64\oleacc.dll
2012-10-13 12:57:17 ----A---- C:\windows\system32\oleaut32.dll
2012-10-13 12:57:17 ----A---- C:\windows\system32\oleacc.dll
2012-10-13 12:57:14 ----A---- C:\windows\system32\wintrust.dll
2012-10-13 12:57:13 ----A---- C:\windows\SYSWOW64\wintrust.dll
2012-10-13 12:57:12 ----A---- C:\windows\system32\mfc42u.dll
2012-10-13 12:57:12 ----A---- C:\windows\system32\mfc42.dll
2012-10-13 12:57:11 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2012-10-13 12:57:11 ----A---- C:\windows\SYSWOW64\mfc42.dll
2012-10-13 12:57:10 ----A---- C:\windows\SYSWOW64\srclient.dll
2012-10-13 12:57:10 ----A---- C:\windows\system32\srcore.dll
2012-10-13 12:57:08 ----A---- C:\windows\SYSWOW64\msi.dll
2012-10-13 12:57:08 ----A---- C:\windows\system32\msi.dll
2012-10-13 12:57:06 ----A---- C:\windows\system32\winresume.exe
2012-10-13 12:57:06 ----A---- C:\windows\system32\winload.exe
2012-10-13 12:57:05 ----A---- C:\windows\system32\kdusb.dll
2012-10-13 12:57:05 ----A---- C:\windows\system32\kdcom.dll
2012-10-13 12:57:05 ----A---- C:\windows\system32\kd1394.dll
2012-10-13 12:57:04 ----A---- C:\windows\system32\drivers\ntfs.sys
2012-10-13 12:57:03 ----A---- C:\windows\SYSWOW64\atmlib.dll
2012-10-13 12:57:03 ----A---- C:\windows\SYSWOW64\atmfd.dll
2012-10-13 12:57:03 ----A---- C:\windows\system32\atmlib.dll
2012-10-13 12:57:03 ----A---- C:\windows\system32\atmfd.dll
2012-10-13 12:56:59 ----A---- C:\windows\system32\wmicmiplugin.dll
2012-10-13 12:56:59 ----A---- C:\windows\system32\taskschd.dll
2012-10-13 12:56:59 ----A---- C:\windows\system32\taskeng.exe
2012-10-13 12:56:59 ----A---- C:\windows\system32\taskcomp.dll
2012-10-13 12:56:59 ----A---- C:\windows\system32\schedsvc.dll
2012-10-13 12:56:58 ----A---- C:\windows\SYSWOW64\taskschd.dll
2012-10-13 12:56:58 ----A---- C:\windows\SYSWOW64\taskeng.exe
2012-10-13 12:56:58 ----A---- C:\windows\SYSWOW64\taskcomp.dll
2012-10-13 12:56:58 ----A---- C:\windows\SYSWOW64\schtasks.exe
2012-10-13 12:56:58 ----A---- C:\windows\system32\schtasks.exe
2012-10-13 12:56:57 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2012-10-13 12:56:57 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2012-10-13 12:56:57 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2012-10-13 12:56:57 ----A---- C:\windows\system32\odbctrac.dll
2012-10-13 12:56:57 ----A---- C:\windows\system32\odbccu32.dll
2012-10-13 12:56:57 ----A---- C:\windows\system32\odbccr32.dll
2012-10-13 12:56:57 ----A---- C:\windows\system32\odbccp32.dll
2012-10-13 12:56:56 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2012-10-13 12:56:56 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2012-10-13 12:56:55 ----A---- C:\windows\system32\win32k.sys
2012-10-13 12:56:54 ----A---- C:\windows\system32\drivers\dfsc.sys
2012-10-13 12:56:53 ----A---- C:\windows\system32\ole32.dll
2012-10-13 12:56:52 ----A---- C:\windows\SYSWOW64\ole32.dll
2012-10-13 12:56:49 ----A---- C:\windows\system32\poqexec.exe
2012-10-13 12:56:48 ----A---- C:\windows\SYSWOW64\poqexec.exe
2012-10-13 12:56:46 ----A---- C:\windows\system32\drivers\afd.sys
2012-10-13 12:56:42 ----A---- C:\windows\system32\wmp.dll
2012-10-13 12:56:41 ----A---- C:\windows\SYSWOW64\wmp.dll
2012-10-13 12:56:40 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2012-10-13 12:56:39 ----A---- C:\windows\system32\wmploc.DLL
2012-10-13 12:56:38 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2012-10-13 12:56:38 ----A---- C:\windows\system32\d3d10level9.dll
2012-10-13 12:56:37 ----A---- C:\windows\SYSWOW64\quartz.dll
2012-10-13 12:56:37 ----A---- C:\windows\system32\quartz.dll
2012-10-13 12:56:36 ----A---- C:\windows\SYSWOW64\qdvd.dll
2012-10-13 12:56:36 ----A---- C:\windows\system32\qdvd.dll
2012-10-13 12:56:33 ----A---- C:\windows\explorer.exe
2012-10-13 12:56:32 ----A---- C:\windows\SYSWOW64\explorer.exe
2012-10-13 12:56:31 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2012-10-13 12:56:31 ----A---- C:\windows\system32\XpsGdiConverter.dll
2012-10-13 12:56:27 ----A---- C:\windows\SYSWOW64\mfc40u.dll
2012-10-13 12:56:27 ----A---- C:\windows\SYSWOW64\mfc40.dll
2012-10-13 12:56:26 ----A---- C:\windows\system32\localspl.dll
2012-10-13 12:56:23 ----A---- C:\windows\system32\csrsrv.dll
2012-10-13 12:56:22 ----A---- C:\windows\SYSWOW64\comctl32.dll
2012-10-13 12:56:22 ----A---- C:\windows\system32\comctl32.dll
2012-10-13 12:56:21 ----A---- C:\windows\SYSWOW64\rtutils.dll
2012-10-13 12:56:21 ----A---- C:\windows\system32\rtutils.dll
2012-10-13 12:56:21 ----A---- C:\windows\system32\drivers\fvevol.sys
2012-10-13 12:56:20 ----A---- C:\windows\SYSWOW64\odbc32.dll
2012-10-13 12:56:20 ----A---- C:\windows\system32\odbc32.dll
2012-10-13 12:56:18 ----A---- C:\windows\system32\kerberos.dll
2012-10-13 12:56:17 ----A---- C:\windows\SYSWOW64\kerberos.dll
2012-10-13 12:56:16 ----A---- C:\windows\system32\psisdecd.dll
2012-10-13 12:56:15 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2012-10-13 12:56:14 ----A---- C:\windows\system32\rdrmemptylst.exe
2012-10-13 12:56:13 ----A---- C:\windows\system32\rdpwsx.dll
2012-10-13 12:56:13 ----A---- C:\windows\system32\rdpcorekmts.dll
2012-10-13 12:56:11 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2012-10-13 12:56:11 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2012-10-13 12:56:11 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2012-10-13 12:56:10 ----A---- C:\windows\SYSWOW64\wmpmde.dll
2012-10-13 12:56:10 ----A---- C:\windows\SYSWOW64\iccvid.dll
2012-10-13 12:56:10 ----A---- C:\windows\system32\wmpmde.dll
2012-10-13 12:56:09 ----A---- C:\windows\SYSWOW64\xmllite.dll
2012-10-13 12:56:09 ----A---- C:\windows\system32\xmllite.dll
2012-10-13 12:56:09 ----A---- C:\windows\system32\drivers\Diskdump.sys
2012-10-13 12:56:08 ----A---- C:\windows\SYSWOW64\mstscax.dll
2012-10-13 12:56:08 ----A---- C:\windows\system32\mstscax.dll
2012-10-13 12:56:07 ----A---- C:\windows\SYSWOW64\mstsc.exe
2012-10-13 12:56:07 ----A---- C:\windows\system32\mstsc.exe
2012-10-13 12:56:06 ----A---- C:\windows\system32\dnsapi.dll
2012-10-13 12:56:05 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2012-10-13 12:56:05 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2012-10-13 12:56:05 ----A---- C:\windows\system32\dnsrslvr.dll
2012-10-13 12:56:05 ----A---- C:\windows\system32\dnscacheugc.exe
2012-10-13 12:56:02 ----A---- C:\windows\system32\browser.dll
2012-10-13 12:56:01 ----A---- C:\windows\SYSWOW64\netapi32.dll
2012-10-13 12:56:01 ----A---- C:\windows\SYSWOW64\browcli.dll
2012-10-13 12:56:01 ----A---- C:\windows\system32\netapi32.dll
2012-10-13 12:56:01 ----A---- C:\windows\system32\browcli.dll
2012-10-13 12:55:56 ----A---- C:\windows\system32\drivers\bowser.sys
2012-10-13 12:55:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2012-10-13 12:55:55 ----A---- C:\windows\system32\ntdll.dll
2012-10-13 12:55:53 ----A---- C:\windows\system32\FXSCOVER.exe
2012-10-13 12:55:51 ----A---- C:\windows\SYSWOW64\asycfilt.dll
2012-10-13 12:55:51 ----A---- C:\windows\system32\asycfilt.dll
2012-10-13 12:55:50 ----A---- C:\windows\SYSWOW64\drvinst.exe
2012-10-13 12:55:50 ----A---- C:\windows\SYSWOW64\devrtl.dll
2012-10-13 12:55:50 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2012-10-13 12:55:50 ----A---- C:\windows\system32\umpnpmgr.dll
2012-10-13 12:55:49 ----A---- C:\windows\SYSWOW64\prevhost.exe
2012-10-13 12:55:49 ----A---- C:\windows\SYSWOW64\devobj.dll
2012-10-13 12:55:49 ----A---- C:\windows\system32\prevhost.exe
2012-10-13 12:55:48 ----A---- C:\windows\SYSWOW64\t2embed.dll
2012-10-13 12:55:48 ----A---- C:\windows\SYSWOW64\StructuredQuery.dll
2012-10-13 12:55:48 ----A---- C:\windows\system32\t2embed.dll
2012-10-13 12:55:48 ----A---- C:\windows\system32\StructuredQuery.dll
2012-10-13 12:55:47 ----A---- C:\windows\system32\profsvc.dll
2012-10-13 12:55:45 ----A---- C:\windows\system32\consent.exe
2012-10-13 12:55:44 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2012-10-13 12:55:44 ----A---- C:\windows\system32\msvcrt.dll
2012-10-13 12:55:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2012-10-13 12:55:43 ----A---- C:\windows\system32\inetcomm.dll
2012-10-13 12:55:41 ----A---- C:\windows\system32\drivers\rdpwd.sys
2012-10-13 12:55:41 ----A---- C:\windows\system32\drivers\partmgr.sys
2012-10-13 12:55:31 ----A---- C:\windows\SYSWOW64\crypt32.dll
2012-10-13 12:55:31 ----A---- C:\windows\system32\crypt32.dll
2012-10-13 12:55:30 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2012-10-13 12:55:30 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2012-10-13 12:55:30 ----A---- C:\windows\system32\cryptsvc.dll
2012-10-13 12:55:30 ----A---- C:\windows\system32\cryptnet.dll
2012-10-13 12:55:22 ----A---- C:\windows\system32\EncDec.dll
2012-10-13 12:55:21 ----A---- C:\windows\SYSWOW64\EncDec.dll
2012-10-13 12:55:20 ----A---- C:\windows\SYSWOW64\sscore.dll
2012-10-13 12:55:20 ----A---- C:\windows\system32\srvsvc.dll
2012-10-13 12:54:47 ----A---- C:\windows\SYSWOW64\win32spl.dll
2012-10-13 12:54:47 ----A---- C:\windows\system32\win32spl.dll
2012-10-13 12:54:47 ----A---- C:\windows\system32\spoolsv.exe
2012-10-13 12:54:47 ----A---- C:\windows\splwow64.exe
2012-10-13 12:44:46 ----A---- C:\windows\SYSWOW64\packager.dll
2012-10-13 12:44:46 ----A---- C:\windows\system32\packager.dll
2012-10-13 12:30:56 ----A---- C:\windows\system32\rdpcore.dll
2012-10-13 12:30:55 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2012-10-13 12:30:55 ----A---- C:\windows\SYSWOW64\cabview.dll
2012-10-13 12:30:55 ----A---- C:\windows\system32\drivers\tdtcp.sys
2012-10-13 12:30:55 ----A---- C:\windows\system32\cabview.dll
2012-10-13 12:27:34 ----A---- C:\windows\system32\wups2.dll
2012-10-13 12:27:34 ----A---- C:\windows\system32\wucltux.dll
2012-10-13 12:27:34 ----A---- C:\windows\system32\wuaueng.dll
2012-10-13 12:27:34 ----A---- C:\windows\system32\wuauclt.exe
2012-10-13 12:27:24 ----A---- C:\windows\system32\wups.dll
2012-10-13 12:27:24 ----A---- C:\windows\system32\wudriver.dll
2012-10-13 12:27:24 ----A---- C:\windows\system32\wuapi.dll
2012-10-13 12:27:14 ----A---- C:\windows\system32\wuwebv.dll
2012-10-13 12:27:14 ----A---- C:\windows\system32\wuapp.exe
2012-10-13 12:17:13 ----D---- C:\Users\Vitek\AppData\Roaming\Adobe
2012-10-13 12:16:27 ----A---- C:\windows\system32\drivers\aswSP.sys
2012-10-13 12:16:27 ----A---- C:\windows\system32\drivers\aswFsBlk.sys
2012-10-13 12:16:25 ----A---- C:\windows\system32\drivers\aswRdr2.sys
2012-10-13 12:16:24 ----A---- C:\windows\system32\drivers\aswTdi.sys
2012-10-13 12:16:24 ----A---- C:\windows\system32\drivers\aswSnx.sys
2012-10-13 12:16:23 ----A---- C:\windows\system32\drivers\aswMonFlt.sys
2012-10-13 12:16:23 ----A---- C:\windows\system32\aswBoot.exe
2012-10-13 12:16:02 ----A---- C:\windows\SYSWOW64\aswBoot.exe
2012-10-13 12:16:02 ----A---- C:\windows\avastSS.scr
2012-10-13 12:15:52 ----D---- C:\ProgramData\AVAST Software
2012-10-13 12:15:52 ----D---- C:\Program Files\AVAST Software
2012-10-13 12:00:01 ----A---- C:\windows\myClean.bat
2012-10-13 11:57:22 ----D---- C:\Users\Vitek\AppData\Roaming\Identities
2012-10-13 11:53:17 ----D---- C:\Users\Vitek\AppData\Roaming\Hewlett-Packard
2012-10-13 11:53:06 ----D---- C:\ProgramData\Symantec
2012-10-13 11:53:06 ----D---- C:\Program Files (x86)\Symantec
2012-10-13 11:52:32 ----A---- C:\windows\system32\drivers\vpcvmm.sys
2012-10-13 11:51:06 ----RD---- C:\Program Files (x86)\Skype
2012-10-13 11:51:05 ----D---- C:\ProgramData\Skype
2012-10-13 11:50:09 ----D---- C:\Program Files (x86)\Windows Live
2012-10-13 11:50:00 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2012-10-13 11:49:47 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2012-10-13 11:49:41 ----D---- C:\Program Files (x86)\Microsoft
2012-10-13 11:48:36 ----A---- C:\windows\SYSWOW64\rsnp2uvc.dll
2012-10-13 11:48:36 ----A---- C:\windows\system32\vsnp2uvc.dll
2012-10-13 11:48:36 ----A---- C:\windows\system32\rsnp2uvc.dll
2012-10-13 11:48:36 ----A---- C:\windows\system32\drivers\snp2uvc.sys
2012-10-13 11:48:36 ----A---- C:\windows\system32\drivers\sncduvc.sys
2012-10-13 11:48:36 ----A---- C:\windows\system32\csnp2uvc.dll
2012-10-13 11:48:35 ----A---- C:\windows\SYSWOW64\vsnp2uvc.dll
2012-10-13 11:48:35 ----A---- C:\windows\snuvcdsm.exe
2012-10-13 11:48:35 ----A---- C:\windows\snp2uvc.src
2012-10-13 11:48:35 ----A---- C:\windows\snp2uvc.ini
2012-10-13 11:48:18 ----D---- C:\Users\Vitek\AppData\Roaming\InstallShield
2012-10-13 11:48:07 ----N---- C:\windows\SYSWOW64\agrsmdel.exe
2012-10-13 11:48:07 ----N---- C:\windows\SYSWOW64\agrscoin.dll
2012-10-13 11:48:07 ----N---- C:\windows\SYSWOW64\agrsco64.dll
2012-10-13 11:48:05 ----D---- C:\Program Files\LSI SoftModem
2012-10-13 11:48:02 ----D---- C:\windows\Options
2012-10-13 11:47:53 ----A---- C:\windows\system32\AESTEC64.dll
2012-10-13 11:47:53 ----A---- C:\windows\system32\AESTAR64.dll
2012-10-13 11:47:53 ----A---- C:\windows\system32\AESTAC64.dll
2012-10-13 11:47:52 ----A---- C:\windows\system32\stlang64.dll
2012-10-13 11:47:52 ----A---- C:\windows\system32\AESTCo64.dll
2012-10-13 11:47:52 ----A---- C:\windows\sttray64.exe
2012-10-13 11:47:26 ----A---- C:\windows\system32\staco64.dll
2012-10-13 11:47:25 ----N---- C:\windows\system32\stapi64.dll
2012-10-13 11:47:25 ----A---- C:\windows\system32\stcplx64.dll
2012-10-13 11:47:25 ----A---- C:\windows\system32\stapo64.dll
2012-10-13 11:47:25 ----A---- C:\windows\system32\drivers\stwrt64.sys
2012-10-13 11:47:22 ----D---- C:\Program Files\IDT
2012-10-13 11:46:52 ----SHD---- C:\HPMBackup
2012-10-13 11:46:40 ----A---- C:\windows\SYSWOW64\log.txt
2012-10-13 11:46:04 ----A---- C:\windows\SYSWOW64\RicohMediadriverVer.dll
2012-10-13 11:46:03 ----A---- C:\windows\system32\snymsico.dll
2012-10-13 11:46:03 ----A---- C:\windows\system32\rixdicon.dll
2012-10-13 11:46:03 ----A---- C:\windows\system32\RiSDIcon.dll
2012-10-13 11:46:03 ----A---- C:\windows\system32\RiMMCIcon.dll
2012-10-13 11:46:03 ----A---- C:\windows\system32\drivers\rixdpe64.sys
2012-10-13 11:46:03 ----A---- C:\windows\system32\drivers\risdpe64.sys
2012-10-13 11:46:03 ----A---- C:\windows\system32\drivers\rimspe64.sys
2012-10-13 11:45:39 ----D---- C:\ProgramData\WinZip
2012-10-13 11:45:38 ----D---- C:\Program Files (x86)\WinZip
2012-10-13 11:45:29 ----D---- C:\Program Files\Validity Sensors
2012-10-13 11:43:08 ----D---- C:\Program Files\Broadcom
2012-10-13 11:43:08 ----A---- C:\windows\system32\drivers\BCMWL664.SYS
2012-10-13 11:43:08 ----A---- C:\windows\system32\bcmwlrc.dll
2012-10-13 11:43:08 ----A---- C:\windows\system32\bcmwlcoi.dll
2012-10-13 11:43:08 ----A---- C:\windows\system32\bcmihvui64.dll
2012-10-13 11:43:08 ----A---- C:\windows\system32\bcmihvsrv64.dll
2012-10-13 11:42:31 ----D---- C:\Program Files\DIFX
2012-10-13 11:41:34 ----D---- C:\Users\Vitek\AppData\Roaming\hpqLog
2012-10-13 11:41:16 ----D---- C:\Users\Vitek\AppData\Roaming\DigitalPersona
2012-10-13 11:41:00 ----SD---- C:\Users\Vitek\AppData\Roaming\Microsoft

======List of files/folders modified in the last 1 month======

2012-10-13 21:58:39 ----D---- C:\windows\Temp
2012-10-13 21:58:38 ----RD---- C:\Program Files
2012-10-13 21:51:59 ----D---- C:\windows\winsxs
2012-10-13 21:51:26 ----D---- C:\ProgramData\HPQLOG
2012-10-13 21:51:12 ----D---- C:\windows\system32\config
2012-10-13 21:24:12 ----D---- C:\windows\SYSWOW64\tr-TR
2012-10-13 21:24:12 ----D---- C:\windows\SYSWOW64\pt-PT
2012-10-13 21:24:12 ----D---- C:\windows\SYSWOW64\ja-JP
2012-10-13 21:24:12 ----D---- C:\windows\SYSWOW64\it-IT
2012-10-13 21:24:12 ----D---- C:\windows\SYSWOW64\el-GR
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\zh-TW
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\zh-CN
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\th-TH
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\sv-SE
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\ru-RU
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\ro-RO
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\pt-BR
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\pl-PL
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\nl-NL
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\nb-NO
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\ko-KR
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\hu-HU
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\he-IL
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\fr-FR
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\fi-FI
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\es-ES
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\de-DE
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\da-DK
2012-10-13 21:24:11 ----D---- C:\windows\SYSWOW64\ar-SA
2012-10-13 21:24:11 ----D---- C:\windows\system32\drivers\cs-CZ
2012-10-13 20:30:16 ----D---- C:\Program Files\Common Files
2012-10-13 18:27:30 ----D---- C:\Program Files\Windows Sidebar
2012-10-13 18:27:30 ----D---- C:\Program Files\Windows Mail
2012-10-13 18:27:30 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-10-13 18:27:30 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-10-13 18:27:30 ----D---- C:\Program Files (x86)\Windows Media Player
2012-10-13 18:27:30 ----D---- C:\Program Files (x86)\Windows Mail
2012-10-13 18:27:30 ----D---- C:\Program Files (x86)\Windows Defender
2012-10-13 18:27:29 ----D---- C:\windows\SYSWOW64\sl-SI
2012-10-13 18:27:29 ----D---- C:\windows\SYSWOW64\migwiz
2012-10-13 18:27:29 ----D---- C:\windows\SYSWOW64\en
2012-10-13 18:27:29 ----D---- C:\windows\SYSWOW64\drivers\en-US
2012-10-13 18:27:29 ----D---- C:\windows\SYSWOW64\drivers
2012-10-13 18:27:29 ----D---- C:\windows\servicing
2012-10-13 18:27:29 ----D---- C:\windows\ehome
2012-10-13 18:27:29 ----D---- C:\Program Files\Windows Photo Viewer
2012-10-13 18:27:29 ----D---- C:\Program Files\Windows Media Player
2012-10-13 18:27:29 ----D---- C:\Program Files\Windows Journal
2012-10-13 18:27:29 ----D---- C:\Program Files\Windows Defender
2012-10-13 18:27:29 ----D---- C:\Program Files\Common Files\System
2012-10-13 18:27:27 ----D---- C:\windows\SYSWOW64\WCN
2012-10-13 18:27:27 ----D---- C:\windows\SYSWOW64\en-US
2012-10-13 18:27:27 ----D---- C:\windows\SYSWOW64\Dism
2012-10-13 18:27:26 ----D---- C:\windows\SYSWOW64\Printing_Admin_Scripts
2012-10-13 18:27:26 ----D---- C:\windows\en-US
2012-10-13 18:27:26 ----D---- C:\Windows
2012-10-13 18:27:25 ----D---- C:\windows\system32\sysprep
2012-10-13 18:27:25 ----D---- C:\windows\system32\oobe
2012-10-13 18:27:25 ----D---- C:\windows\system32\migwiz
2012-10-13 18:27:25 ----D---- C:\windows\system32\en
2012-10-13 18:27:25 ----D---- C:\windows\system32\drivers\en-US
2012-10-13 18:27:25 ----D---- C:\windows\system32\Boot
2012-10-13 18:27:24 ----D---- C:\windows\system32\sl-SI
2012-10-13 18:27:23 ----D---- C:\windows\system32\en-US
2012-10-13 18:27:21 ----D---- C:\windows\system32\WCN
2012-10-13 18:27:21 ----D---- C:\windows\system32\Dism
2012-10-13 18:27:18 ----D---- C:\windows\system32\Printing_Admin_Scripts
2012-10-13 18:27:15 ----D---- C:\windows\SYSWOW64\sk-SK
2012-10-13 18:27:13 ----D---- C:\windows\system32\sk-SK
2012-10-13 18:27:11 ----D---- C:\windows\system32\DriverStore
2012-10-13 18:27:11 ----D---- C:\windows\system32\drivers
2012-10-13 18:27:07 ----D---- C:\windows\SYSWOW64\hr-HR
2012-10-13 18:27:05 ----D---- C:\windows\system32\hr-HR
2012-10-13 18:26:57 ----D---- C:\Program Files\DVD Maker
2012-10-13 18:26:50 ----D---- C:\windows\Speech
2012-10-13 17:43:20 ----D---- C:\windows\system32\wdi
2012-10-13 16:06:58 ----D---- C:\windows\Microsoft.NET
2012-10-13 16:06:31 ----RSD---- C:\windows\assembly
2012-10-13 16:02:36 ----D---- C:\windows\Logs
2012-10-13 15:34:39 ----SHD---- C:\windows\Installer
2012-10-13 15:33:34 ----D---- C:\windows\System32
2012-10-13 15:33:34 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-10-13 15:33:33 ----D---- C:\windows\inf
2012-10-13 15:12:15 ----D---- C:\windows\SYSWOW64\cs-CZ
2012-10-13 15:12:15 ----D---- C:\windows\system32\cs-CZ
2012-10-13 15:09:43 ----D---- C:\windows\SysWOW64
2012-10-13 15:09:37 ----HD---- C:\ProgramData
2012-10-13 15:09:31 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-10-13 15:09:03 ----HD---- C:\SYSTEM.SAV
2012-10-13 14:59:37 ----D---- C:\windows\system32\catroot
2012-10-13 14:59:31 ----D---- C:\windows\system32\catroot2
2012-10-13 14:52:08 ----D---- C:\windows\Tasks
2012-10-13 14:52:08 ----D---- C:\windows\system32\Tasks
2012-10-13 14:51:36 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-10-13 14:48:21 ----D---- C:\windows\Help
2012-10-13 14:47:59 ----D---- C:\ProgramData\Hewlett-Packard
2012-10-13 14:47:29 ----D---- C:\Program Files (x86)\Hewlett-Packard
2012-10-13 14:45:33 ----D---- C:\swsetup
2012-10-13 14:37:09 ----RD---- C:\Program Files (x86)
2012-10-13 14:27:57 ----RSD---- C:\windows\Fonts
2012-10-13 14:27:55 ----D---- C:\windows\AppPatch
2012-10-13 14:27:51 ----D---- C:\Program Files\Internet Explorer
2012-10-13 14:27:51 ----D---- C:\Program Files (x86)\Internet Explorer
2012-10-13 14:27:43 ----D---- C:\windows\SYSWOW64\migration
2012-10-13 14:27:39 ----D---- C:\windows\system32\migration
2012-10-13 14:27:39 ----D---- C:\windows\PolicyDefinitions
2012-10-13 14:06:32 ----D---- C:\windows\debug
2012-10-13 13:56:32 ----D---- C:\ProgramData\PDFC
2012-10-13 12:27:27 ----SD---- C:\ProgramData\Microsoft
2012-10-13 12:14:21 ----D---- C:\windows\system32\drivers\UMDF
2012-10-13 11:57:19 ----SHD---- C:\$Recycle.Bin
2012-10-13 11:53:14 ----RD---- C:\Program Files (x86)\Online Services
2012-10-13 11:51:07 ----D---- C:\Program Files (x86)\Common Files
2012-10-13 11:51:01 ----D---- C:\ProgramData\Uninstall
2012-10-13 11:51:01 ----D---- C:\Program Files\Hewlett-Packard
2012-10-13 11:48:41 ----D---- C:\windows\twain_32
2012-10-13 11:46:31 ----D---- C:\Program Files (x86)\Intel
2012-10-13 11:43:09 ----D---- C:\windows\system32\zh-TW
2012-10-13 11:43:09 ----D---- C:\windows\system32\zh-HK
2012-10-13 11:43:09 ----D---- C:\windows\system32\zh-CN
2012-10-13 11:43:09 ----D---- C:\windows\system32\tr-TR
2012-10-13 11:43:09 ----D---- C:\windows\system32\th-TH
2012-10-13 11:43:09 ----D---- C:\windows\system32\sv-SE
2012-10-13 11:43:09 ----D---- C:\windows\system32\ru-RU
2012-10-13 11:43:09 ----D---- C:\windows\system32\ro-RO
2012-10-13 11:43:09 ----D---- C:\windows\system32\pt-PT
2012-10-13 11:43:09 ----D---- C:\windows\system32\pt-BR
2012-10-13 11:43:09 ----D---- C:\windows\system32\pl-PL
2012-10-13 11:43:09 ----D---- C:\windows\system32\nl-NL
2012-10-13 11:43:09 ----D---- C:\windows\system32\nb-NO
2012-10-13 11:43:09 ----D---- C:\windows\system32\lv-LV
2012-10-13 11:43:09 ----D---- C:\windows\system32\lt-LT
2012-10-13 11:43:09 ----D---- C:\windows\system32\ko-KR
2012-10-13 11:43:09 ----D---- C:\windows\system32\ja-JP
2012-10-13 11:43:09 ----D---- C:\windows\system32\it-IT
2012-10-13 11:43:09 ----D---- C:\windows\system32\hu-HU
2012-10-13 11:43:09 ----D---- C:\windows\system32\he-IL
2012-10-13 11:43:09 ----D---- C:\windows\system32\fr-FR
2012-10-13 11:43:09 ----D---- C:\windows\system32\fi-FI
2012-10-13 11:43:09 ----D---- C:\windows\system32\et-EE
2012-10-13 11:43:08 ----D---- C:\windows\system32\es-ES
2012-10-13 11:43:08 ----D---- C:\windows\system32\el-GR
2012-10-13 11:43:08 ----D---- C:\windows\system32\de-DE
2012-10-13 11:43:08 ----D---- C:\windows\system32\da-DK
2012-10-13 11:43:08 ----D---- C:\windows\system32\bg-BG
2012-10-13 11:43:08 ----D---- C:\windows\system32\ar-SA
2012-10-13 11:42:05 ----D---- C:\windows\Panther
2012-10-13 11:40:59 ----RD---- C:\Users
2012-10-13 11:39:34 ----D---- C:\windows\system32\restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-01-08 409112]
R0 PxHlpa64;PxHlpa64; C:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 SafeBoot;SafeBoot; C:\windows\system32\drivers\SafeBoot.sys [2010-02-02 56648]
R0 SbAlg;SbAlg; C:\windows\system32\drivers\SbAlg.sys [2009-06-04 60160]
R0 SbFsLock;SbFsLock; C:\windows\system32\drivers\SbFsLock.sys [2010-02-02 15688]
R1 aswRdr;aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [2012-08-21 54072]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2012-08-21 969200]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2012-08-21 359464]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2012-08-21 59728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 RsvLock;RsvLock; C:\windows\system32\drivers\RsvLock.sys [2010-02-02 58184]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\windows\system32\DRIVERS\vpcnfltr.sys [2012-10-13 66304]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\windows\system32\drivers\vpcvmm.sys [2009-12-01 359624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2012-08-21 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]
R2 rimspci;rimspci; C:\windows\system32\DRIVERS\rimspe64.sys [2009-10-26 61952]
R2 risdpcie;risdpcie; C:\windows\system32\DRIVERS\risdpe64.sys [2009-10-28 79360]
R2 rixdpcie;rixdpcie; C:\windows\system32\DRIVERS\rixdpe64.sys [2009-12-11 55808]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\agrsm64.sys [2010-01-21 1209856]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl664.sys [2012-10-13 3058168]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\windows\system32\DRIVERS\e1k62x64.sys [2010-01-07 295088]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2010-02-16 25912]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-04-21 10326784]
R3 Impcd;Impcd; C:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-02-03 271872]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2010-01-18 1803904]
R3 STHDA;IDT High Definition Audio CODEC; C:\windows\system32\DRIVERS\stwrt64.sys [2010-03-17 505856]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-06-04 1379376]
R3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 vpcbus;Virtual PC Host Bus Service; C:\windows\system32\DRIVERS\vpchbus.sys [2012-10-13 187904]
R3 vpcusb;USB Virtualization Connector Service; C:\windows\system32\DRIVERS\vpcusb.sys [2012-10-13 95232]
R3 WinUSB;WinUSB Service; C:\windows\system32\DRIVERS\WinUSB.sys [2009-07-14 40448]
S3 DAMDrv;DAMDrv; C:\windows\system32\DRIVERS\DAMDrv64.sys [2009-10-21 40760]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETw5s64.sys [2010-02-01 7675392]
S3 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
S3 storvsc;storvsc; C:\windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

[selkir]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-04 277032]
R2 AESTFilters;Andrea ST Filters Service; C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe [2009-03-03 89600]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2010-01-21 16896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2010-03-31 462088]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2010-04-05 103992]
R2 HP ProtectTools Service;HP ProtectTools Service; c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [2010-03-17 36864]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-04-05 103992]
R2 HPDayStarterService;HP DayStarter Service; c:\Program Files (x86)\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe [2010-03-25 90112]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
R2 HpFkCryptService;Drive Encryption Service; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2010-02-02 281192]
R2 HPFSService;File Sanitizer for HP ProtectTools; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2010-01-19 297984]
R2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-03-01 264248]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2010-01-08 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-02-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-04 268824]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2010-03-06 635416]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 STacSV;Audio Service; C:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\STacSV64.exe [2010-03-17 244736]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-04 2320920]
R3 DEBridge;DEBridge; c:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe [2010-02-02 704512]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-28 799800]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2010-02-18 2045232]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2009-12-07 362040]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-11-23 1120752]
S3 stllssvr;stllssvr; c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2009-10-16 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-10-13 1255736]

-----------------EOF-----------------
Aktualizace win instaluji už od rána, zabezpečil jsem, ovladače zatím nic, disk hold nevadí no.

[Roli]

Tohle fixni v HJT :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe" UNATTENDED
O4 - HKCU\..\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)

Jak na to jsme si už psali


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

HP ProtectTools Security Manager

HP ProtectTools Device Locking

HP ProtectTools Service

HP Support Assistant Service

HP DayStarter Service

File Sanitizer for HP ProtectTools

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Pak dej vědět jak to prošlo a co na to PC.

[selkir]

Nepozoruji zatím nic špatného. Tuto službu jsem mezi službami nenalezl: HP ProtectTools Security Manager

[Roli]

Tuto službu jsem mezi službami nenalezl: HP ProtectTools Security Manager

Nevadí.

Nepozoruji zatím nic špatného

V tom případě pokud již nic nepotřebuješ doladit je to z mé strany vše.

[selkir]

Dobře, děkuji, jen se ještě zeptám, když teď pomocí nějakého SW rozdělím disk na dva oddíly, tak když bych případně chtěl znovu přeinstalovávat win, tak se stejnak přemaže i tento vytvořený datový oddíl? Protože jestli ano, nemá cenu abych ho dělal.

[Roli]

Já se spíš bojím aby softík kterým nyní rozdělíš disk nezničil tu skrytou instalaci.

Pokud budeš chtít disk rozdělit udělal bych to při příští instalaci systému kdy by to mělo být v pohodě.

Nic z toho ale nemám osobně vyzkoušené tak nemohu na sto pro potvrdit jelikož disk nikdy nikomu nerozděluji.

[selkir]

OK, tak ho taky dělit nebudu a bude

[Roli]

OK, tak ho taky dělit nebudu a bude

Osobně nevidím jediný důvod proč HDD dělit, pokud si chci něco dát jinam
udělám to rozhodně na jiný disk, nikoliv na stejný byť rozdělený.

[selkir]

OK.

[Roli]

Je to tedy vše nebo Tě ještě něco trápí

[selkir]

Snad poslední dotaz, má smysl k odinstalaci programů používat nějaký specializovaný nástroj, nebo bohatě stačí Ccleaner?

[Roli]

Pokud chceš nějaký softík k tomu přímo určený, měl bys ho tam mít dříve než začneš cokoliv
krom základních věcí kolem systému a hardware instalovat.
Avšak zatím jsem nenašel žádný ať free nebo placený který na sto pro funguje, tak že CCleaner stačí

[selkir]

Okej, tak tedy moc děkuji, za všechny info z vlákna.