ComboFix 13-06-08.02 - Matěj 11.06.2013 21:40:21.3.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4094.2860 [GMT 2:00]
Spuštěný z: c:\users\Matýj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NNE6TPFB\ComboFix.exe
AV: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Anti-Virus Business Edition 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-11 do 2013-06-11 )))))))))))))))))))))))))))))))
.
.
2013-06-11 19:43 . 2013-06-11 19:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-03 12:03 . 2013-06-03 12:03 -------- d-----w- c:\program files (x86)\Microsoft ActiveSync
2013-06-03 12:02 . 2013-06-03 12:02 -------- d-----w- c:\windows\PCHEALTH
2013-06-02 21:12 . 2013-06-02 21:12 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-05-27 08:46 . 2013-05-27 08:46 -------- d-----w- c:\program files\CCleaner
2013-05-27 08:29 . 2013-05-27 08:29 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-27 08:29 . 2013-05-27 08:29 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-27 08:29 . 2013-05-27 08:29 -------- d-----w- c:\windows\SysWow64\Macromed
2013-05-27 08:29 . 2013-05-27 08:29 -------- d-----w- c:\windows\system32\Macromed
2013-05-26 23:25 . 2013-05-26 23:25 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-05-26 23:25 . 2013-06-11 19:33 -------- d-----w- c:\programdata\NVIDIA
2013-05-26 23:24 . 2013-03-15 04:16 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-05-26 23:24 . 2013-03-15 04:16 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-05-26 23:24 . 2013-03-15 04:16 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-05-26 23:24 . 2013-03-15 04:16 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-05-26 23:24 . 2013-03-15 04:16 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-05-26 23:24 . 2013-03-15 04:16 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-05-26 23:24 . 2013-03-13 16:24 3065455 ----a-w- c:\windows\system32\nvcoproc.bin
2013-05-26 22:41 . 2013-05-26 22:41 -------- d-----w- c:\windows\SysWow64\drivers\AVG
2013-05-26 22:40 . 2013-06-11 17:00 -------- d-----w- c:\windows\system32\drivers\AVG
2013-05-26 22:40 . 2013-05-26 22:40 -------- d-----w- C:\$AVG
2013-05-26 22:40 . 2013-05-26 22:55 -------- d-----w- c:\programdata\AVG2012
2013-05-26 22:39 . 2013-05-26 22:39 -------- d-----w- c:\program files (x86)\AVG
2013-05-23 21:13 . 2013-05-26 23:24 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-05-23 21:13 . 2013-03-15 05:53 15508512 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-05-23 21:13 . 2013-03-15 05:53 13088000 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-05-23 21:13 . 2013-02-25 22:32 1814304 ----a-w- c:\windows\system32\nvdispco64.dll
2013-05-23 21:13 . 2011-08-03 11:50 67176 ----a-w- c:\windows\system32\OpenCL.dll
2013-05-23 21:13 . 2011-08-03 11:50 57960 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-05-23 21:13 . 2011-08-03 11:50 1453160 ----a-w- c:\windows\system32\nvgenco64.dll
2013-05-23 21:11 . 2013-05-23 21:11 -------- d-----w- C:\NVIDIA
2013-05-23 17:10 . 2013-06-01 08:58 -------- d-----w- c:\programdata\Skype
2013-05-21 19:23 . 2013-05-21 19:23 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-05-21 18:42 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-05-21 18:42 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-05-21 18:42 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-05-21 18:42 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-05-21 18:42 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-05-21 18:42 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-05-21 18:42 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-05-21 18:42 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-05-21 18:42 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-05-21 17:00 . 2013-05-21 17:00 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2013-05-18 16:00 . 2013-05-18 16:47 -------- d-----w- c:\program files (x86)\StarCraft II
2013-05-18 15:44 . 2013-06-01 08:59 -------- d-----w- c:\program files (x86)\Google
2013-05-18 15:18 . 2013-05-21 18:37 -------- d-----w- c:\program files (x86)\Diablo III
2013-05-18 15:18 . 2013-05-18 16:44 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2013-05-18 15:18 . 2013-05-18 16:20 -------- d-----w- c:\programdata\Blizzard Entertainment
2013-05-18 15:17 . 2013-05-18 15:17 -------- d-----w- c:\programdata\Battle.net
2013-05-18 14:07 . 2013-06-03 12:02 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-05-18 13:57 . 2013-02-16 23:40 28672 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-05-18 13:32 . 2013-05-18 13:32 -------- d-----w- c:\windows\CheckSur
2013-05-18 13:28 . 2013-05-26 22:34 -------- d-----w- c:\programdata\AVG2013
2013-05-18 13:26 . 2013-06-08 19:29 -------- d-sh--w- c:\windows\Installer
2013-05-18 13:26 . 2013-05-26 22:37 -------- d-----w- c:\programdata\MFAData
2013-05-18 13:26 . 2013-05-18 13:26 -------- d--h--w- c:\programdata\Common Files
2013-05-18 13:24 . 2013-05-18 13:24 -------- d-----w- c:\windows\SysWow64\Wat
2013-05-18 13:24 . 2013-05-18 13:24 -------- d-----w- c:\windows\system32\Wat
2013-05-18 12:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-05-18 12:59 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-05-18 12:59 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-05-18 12:59 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-05-18 12:54 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-05-18 12:50 . 2013-05-21 18:43 -------- d-----w- c:\windows\Panther
2013-05-18 12:49 . 2013-05-03 14:15 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-18 12:49 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3285B98A-06DE-421F-A207-6E57DD54C82E}\mpengine.dll
2013-05-18 12:48 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-05-18 12:48 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-05-18 12:48 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-05-18 12:48 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-05-18 12:48 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-05-18 12:48 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-05-18 12:47 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-05-18 12:47 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-05-18 12:47 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-05-18 12:47 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-05-18 12:47 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-05-18 12:47 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-05-18 12:47 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-05-18 12:46 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-05-18 12:46 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-05-18 12:46 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-05-18 12:46 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-05-18 12:46 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-05-18 12:43 . 2012-12-07 12:26 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2013-05-18 12:42 . 2012-10-03 17:44 70656 ----a-w- c:\windows\system32\nlaapi.dll
2013-05-18 12:41 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2013-05-18 12:33 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2013-05-18 12:33 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-05-18 12:26 . 2013-05-26 23:25 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2013-05-18 12:26 . 2013-05-26 23:24 -------- d-----w- c:\program files\NVIDIA Corporation
2013-05-18 12:24 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-05-18 12:24 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-05-18 12:24 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-05-18 12:21 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-05-18 12:21 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-05-18 12:21 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-05-18 12:21 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-05-18 12:21 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-05-18 12:21 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-05-18 12:21 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-05-18 12:21 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-05-18 12:21 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-05-18 12:21 . 2013-05-18 12:21 -------- d-----w- c:\users\Matěj
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-18 12:42 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-18 12:42 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-18 12:42 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-18 12:42 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-18 12:42 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-18 12:42 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-11 01:18 . 2013-04-11 01:18 384800 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2013-03-14 20:07 . 2013-03-14 20:07 559904 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-11-19 2598520]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys;c:\windows\SYSNATIVE\DRIVERS\avgfwd6a.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2012\avgfws.exe;c:\program files (x86)\AVG\AVG2012\avgfws.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsfiltera.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 15:44]
.
2013-06-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 15:44]
.
.
--------- X64 Entries -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-11 21:44:47
ComboFix-quarantined-files.txt 2013-06-11 19:44
ComboFix2.txt 2013-05-21 19:48
ComboFix3.txt 2013-05-21 19:39
.
Před spuštěním: Volných bajtů: 186 280 820 736
Po spuštění: Volných bajtů: 186 213 543 936
.
- - End Of File - - 9F58BAA2D32B2625A92A01B9600D3180
A36C5E4F47E84449FF07ED3517B43A31
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o odborný komentář, zd je log ComboFix, RSIT bude
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119526
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o odborný komentář, zd je log ComboFix, RSIT bude
Zdravím!
Proč spouštíte ComboFix, utilitu určenou pouze profesionálům? Hodláte si poškodit systém, nebo aplikace? Log RSIT je nyní k ničemu, neboť pokud byl PC zavirován, CF smaže všechny stopy. Běžná praxe je nejdřív RSIT (příp. DDS) a až to rádce zkontroluje a doporučí CF, skenujte.
Proč spouštíte ComboFix, utilitu určenou pouze profesionálům? Hodláte si poškodit systém, nebo aplikace? Log RSIT je nyní k ničemu, neboť pokud byl PC zavirován, CF smaže všechny stopy. Běžná praxe je nejdřív RSIT (příp. DDS) a až to rádce zkontroluje a doporučí CF, skenujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Lze to vyřešit? Díky
Logfile of random's system information tool 1.09 (written by random/random)
Run by Matěj at 2013-06-11 22:02:48
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 178 GB (75%) free of 238 GB
Total RAM: 4094 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:03:05, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Matěj.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -update activex
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 5624 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgfws.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Internet Explorer\iexplore.exe"
C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe" /command_id=37336067-4119-470e-81a1-35470267d61a /client_id=4c00030e-5fe1-453d-9abd-ec5c08e1265e
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3347878 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3282304 /prefetch:2
notepad.exe "C:\Users\MATJ~1\AppData\Local\Temp\log.txt"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:333059 /prefetch:2
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=ccfa5e2c-2393-4330-b3ad-ab77c4bb4b6b /coreSdkOptions=30 /logConfFile="C:\ProgramData\AVG2012\temp\9bdad221-3f4f-4e0f-a197-1a575c201e4b-71c-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=04e0d423-a525-4633-a963-f21cf039d425 /coreSdkOptions=18 /logConfFile="C:\ProgramData\AVG2012\temp\e7650227-2fc5-4240-a3a6-3444c7453f7e-914-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3151193 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Matěj\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe [2013-05-27 514440]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 3 months======
2013-06-11 22:02:49 ----D---- C:\Program Files\trend micro
2013-06-11 22:02:48 ----D---- C:\rsit
2013-06-11 21:56:34 ----SHD---- C:\$RECYCLE.BIN
2013-06-11 21:44:48 ----D---- C:\Windows\temp
2013-06-11 21:44:47 ----A---- C:\ComboFix.txt
2013-06-11 21:39:07 ----A---- C:\Windows\zip.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWSC.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWREG.exe
2013-06-11 21:39:07 ----A---- C:\Windows\sed.exe
2013-06-11 21:39:07 ----A---- C:\Windows\PEV.exe
2013-06-11 21:39:07 ----A---- C:\Windows\NIRCMD.exe
2013-06-11 21:39:07 ----A---- C:\Windows\MBR.exe
2013-06-11 21:39:07 ----A---- C:\Windows\grep.exe
2013-06-03 14:03:32 ----A---- C:\Windows\ODBC.INI
2013-06-03 14:03:05 ----D---- C:\Program Files (x86)\Microsoft ActiveSync
2013-06-03 14:02:26 ----D---- C:\Windows\PCHEALTH
2013-06-03 14:02:26 ----D---- C:\Program Files (x86)\Microsoft Office
2013-06-02 23:12:05 ----D---- C:\Program Files (x86)\Adobe
2013-05-27 10:46:15 ----D---- C:\Program Files\CCleaner
2013-05-27 10:29:44 ----D---- C:\Users\Matěj\AppData\Roaming\Macromedia
2013-05-27 10:29:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-27 10:29:37 ----D---- C:\Windows\SYSWOW64\Macromed
2013-05-27 10:29:35 ----D---- C:\Windows\system32\Macromed
2013-05-27 10:29:03 ----D---- C:\ProgramData\Adobe
2013-05-27 01:25:20 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-05-27 01:25:01 ----D---- C:\ProgramData\NVIDIA
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvshext.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvmctray.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispgenco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-27 01:06:57 ----D---- C:\Users\Matěj\AppData\Roaming\NVIDIA
2013-05-27 00:42:18 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2012
2013-05-27 00:41:58 ----D---- C:\Windows\SYSWOW64\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\Windows\system32\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\$AVG
2013-05-27 00:40:36 ----D---- C:\ProgramData\AVG2012
2013-05-27 00:39:49 ----D---- C:\Program Files (x86)\AVG
2013-05-23 23:13:48 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvgenco64.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvdispco64.dll
2013-05-23 23:11:56 ----D---- C:\NVIDIA
2013-05-23 19:10:13 ----D---- C:\Users\Matěj\AppData\Roaming\Skype
2013-05-23 19:10:07 ----D---- C:\ProgramData\Skype
2013-05-21 21:31:42 ----D---- C:\Qoobox
2013-05-21 21:31:26 ----D---- C:\Windows\erdnt
2013-05-21 21:23:29 ----A---- C:\Windows\system32\drivers\stflt.sys
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-05-21 20:44:10 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprt.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpudd.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpcorets.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\aaclient.dll
2013-05-21 20:44:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-21 20:44:08 ----A---- C:\Windows\system32\mstscax.dll
2013-05-21 20:42:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\drivers\cng.sys
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\lsasrv.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-05-21 20:42:29 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-05-21 20:42:29 ----A---- C:\Windows\system32\qdvd.dll
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-05-19 21:48:08 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\fsutil.exe
2013-05-19 21:48:08 ----A---- C:\Windows\system32\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-05-19 21:48:07 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\storport.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-05-18 18:00:43 ----D---- C:\Program Files (x86)\StarCraft II
2013-05-18 17:44:14 ----D---- C:\Program Files (x86)\Google
2013-05-18 17:18:28 ----D---- C:\ProgramData\Blizzard Entertainment
2013-05-18 17:18:28 ----D---- C:\Program Files (x86)\Diablo III
2013-05-18 17:17:01 ----D---- C:\ProgramData\Battle.net
2013-05-18 16:07:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-18 16:01:12 ----D---- C:\Users\Matěj\AppData\Roaming\Adobe
2013-05-18 15:57:49 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-05-18 15:32:18 ----D---- C:\Windows\CheckSur
2013-05-18 15:30:29 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2013
2013-05-18 15:30:23 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-18 15:29:41 ----D---- C:\Users\Matěj\AppData\Roaming\TuneUp Software
2013-05-18 15:28:59 ----D---- C:\ProgramData\AVG2013
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\FntCache.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d2d1.dll
2013-05-18 15:26:41 ----SHD---- C:\Windows\Installer
2013-05-18 15:26:31 ----HD---- C:\ProgramData\Common Files
2013-05-18 15:26:31 ----D---- C:\ProgramData\MFAData
2013-05-18 15:24:44 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-18 15:24:42 ----D---- C:\Windows\system32\Wat
2013-05-18 14:59:01 ----A---- C:\Windows\system32\Wdfres.dll
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-05-18 14:54:48 ----A---- C:\Windows\system32\browserchoice.exe
2013-05-18 14:50:36 ----D---- C:\Windows\Panther
2013-05-18 14:49:54 ----A---- C:\Windows\system32\MRT.exe
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmfd.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFx.dll
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFHost.exe
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\wow64win.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\ntvdm64.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\conhost.exe
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64cpu.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\consent.exe
2013-05-18 14:44:09 ----A---- C:\Windows\system32\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\appinfo.dll
2013-05-18 14:44:00 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\Wpc.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\gameux.dll
2013-05-18 14:43:59 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-05-18 14:43:51 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-05-18 14:43:51 ----A---- C:\Windows\system32\tzres.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\CPFilters.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\tquery.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-05-18 14:43:21 ----A---- C:\Windows\system32\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\msscntrs.dll
2013-05-18 14:43:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-05-18 14:43:17 ----A---- C:\Windows\system32\ntshrui.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\user.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-05-18 14:43:14 ----A---- C:\Windows\system32\winsrv.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlasvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-05-18 14:42:56 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-05-18 14:42:56 ----A---- C:\Windows\system32\poqexec.exe
2013-05-18 14:42:47 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-05-18 14:42:47 ----A---- C:\Windows\system32\webio.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccp32.dll
2013-05-18 14:42:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42u.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-05-18 14:42:37 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-05-18 14:42:36 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-05-18 14:42:36 ----A---- C:\Windows\system32\quartz.dll
2013-05-18 14:42:35 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-18 14:42:34 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\system32\msxml3r.dll
2013-05-18 14:42:32 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-05-18 14:42:32 ----A---- C:\Windows\explorer.exe
2013-05-18 14:42:31 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\cdd.dll
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-18 14:42:24 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\netio.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-05-18 14:42:19 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\win32k.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpwsx.dll
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspisrv.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspicli.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\secur32.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\lsass.exe
2013-05-18 14:42:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsapi.dll
2013-05-18 14:42:15 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv.sys
2013-05-18 14:42:13 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-05-18 14:42:13 ----A---- C:\Windows\system32\dpnet.dll
2013-05-18 14:42:11 ----A---- C:\Windows\system32\profsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\crypt32.dll
2013-05-18 14:42:06 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-05-18 14:42:06 ----A---- C:\Windows\system32\wintrust.dll
2013-05-18 14:42:04 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-05-18 14:42:04 ----A---- C:\Windows\system32\usp10.dll
2013-05-18 14:42:02 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-05-18 14:42:01 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-05-18 14:42:01 ----A---- C:\Windows\system32\psisdecd.dll
2013-05-18 14:42:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\drivers\afd.sys
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winresume.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winload.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdusb.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdcom.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kd1394.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-05-18 14:41:54 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-05-18 14:41:54 ----A---- C:\Windows\system32\synceng.dll
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-18 14:41:53 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\taskhost.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\smss.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browser.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-05-18 14:41:50 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-05-18 14:41:50 ----A---- C:\Windows\system32\inetcomm.dll
2013-05-18 14:41:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\srcore.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-05-18 14:41:47 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-05-18 14:41:47 ----A---- C:\Windows\system32\msvcrt.dll
2013-05-18 14:41:46 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-05-18 14:41:46 ----A---- C:\Windows\system32\prevhost.exe
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleacc.dll
2013-05-18 14:41:44 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-05-18 14:41:44 ----A---- C:\Windows\system32\EncDec.dll
2013-05-18 14:41:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-05-18 14:41:42 ----A---- C:\Windows\system32\localspl.dll
2013-05-18 14:41:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-05-18 14:41:41 ----A---- C:\Windows\system32\ntdll.dll
2013-05-18 14:41:39 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-05-18 14:41:39 ----A---- C:\Windows\system32\cdosys.dll
2013-05-18 14:41:38 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-05-18 14:41:37 ----A---- C:\Windows\system32\spoolsv.exe
2013-05-18 14:41:37 ----A---- C:\Windows\splwow64.exe
2013-05-18 14:33:17 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-05-18 14:33:17 ----A---- C:\Windows\system32\packager.dll
2013-05-18 14:26:37 ----D---- C:\Program Files\NVIDIA Corporation
2013-05-18 14:26:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-18 14:24:51 ----A---- C:\Windows\system32\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wups2.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wucltux.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuaueng.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuauclt.exe
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wups.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wudriver.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wuapi.dll
2013-05-18 14:21:23 ----D---- C:\Users\Matěj\AppData\Roaming\Identities
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuwebv.dll
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuapp.exe
2013-05-18 14:21:03 ----SD---- C:\Users\Matěj\AppData\Roaming\Microsoft
2013-05-18 14:21:03 ----D---- C:\Users\Matěj\AppData\Roaming\Media Center Programs
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Šablony
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Plocha
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Oblíbené položky
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Nabídka Start
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Dokumenty
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Data aplikací
2013-05-18 14:20:51 ----D---- C:\Recovery
2013-05-18 13:54:12 ----D---- C:\Windows\SoftwareDistribution
2013-05-18 13:52:04 ----D---- C:\Windows\Prefetch
2013-05-18 13:51:23 ----ASH---- C:\pagefile.sys
2013-05-18 13:51:22 ----SHD---- C:\System Volume Information
2013-05-18 13:51:22 ----ASH---- C:\hiberfil.sys
2013-04-11 03:18:40 ----A---- C:\Windows\system32\drivers\avgtdia.sys
2013-03-14 22:07:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
======List of files/folders modified in the last 3 months======
2013-06-11 22:02:49 ----RD---- C:\Program Files
2013-06-11 21:56:12 ----D---- C:\Windows\SYSWOW64\drivers
2013-06-11 21:44:48 ----D---- C:\Windows
2013-06-11 21:43:38 ----A---- C:\Windows\system.ini
2013-06-11 21:42:16 ----D---- C:\Windows\SysWOW64
2013-06-11 21:42:16 ----D---- C:\Windows\AppPatch
2013-06-11 21:42:15 ----D---- C:\Program Files (x86)\Common Files
2013-06-11 21:38:52 ----D---- C:\Windows\system32\drivers
2013-06-11 21:38:11 ----D---- C:\Windows\System32
2013-06-11 21:38:11 ----D---- C:\Windows\inf
2013-06-11 21:38:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 21:32:28 ----D---- C:\Windows\system32\config
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot2
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot
2013-06-11 19:03:04 ----D---- C:\Windows\winsxs
2013-06-06 21:35:42 ----A---- C:\Windows\win.ini
2013-06-03 14:11:42 ----RSD---- C:\Windows\assembly
2013-06-03 14:11:30 ----RSD---- C:\Windows\Fonts
2013-06-03 14:03:05 ----RD---- C:\Program Files (x86)
2013-06-03 14:03:05 ----D---- C:\Windows\ShellNew
2013-06-03 14:02:26 ----SD---- C:\ProgramData\Microsoft
2013-06-03 14:00:25 ----D---- C:\Windows\system
2013-06-03 13:45:07 ----D---- C:\Windows\rescache
2013-05-27 10:46:17 ----D---- C:\Windows\system32\Tasks
2013-05-27 10:29:03 ----D---- C:\ProgramData
2013-05-27 01:25:08 ----D---- C:\Windows\system32\DriverStore
2013-05-27 01:24:40 ----D---- C:\Windows\Help
2013-05-26 23:47:12 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-23 23:16:06 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-23 23:16:06 ----D---- C:\Windows\system32\cs-CZ
2013-05-23 23:07:20 ----RD---- C:\Users
2013-05-21 22:04:10 ----D---- C:\Windows\system32\LogFiles
2013-05-21 21:07:25 ----D---- C:\Windows\Microsoft.NET
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\system32\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\drivers\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\PolicyDefinitions
2013-05-21 20:43:05 ----D---- C:\Windows\Logs
2013-05-21 20:43:05 ----D---- C:\Windows\debug
2013-05-19 21:45:10 ----D---- C:\Windows\system32\wdi
2013-05-18 17:44:23 ----D---- C:\Windows\Tasks
2013-05-18 15:58:05 ----D---- C:\Windows\SYSWOW64\migration
2013-05-18 15:58:05 ----D---- C:\Program Files\Internet Explorer
2013-05-18 15:58:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-18 15:58:04 ----D---- C:\Windows\system32\migration
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\da-DK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\system32\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\system32\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\system32\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\system32\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\da-DK
2013-05-18 15:19:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-05-18 15:19:57 ----D---- C:\Windows\ehome
2013-05-18 15:19:57 ----D---- C:\Program Files\Common Files\System
2013-05-18 15:19:46 ----D---- C:\Windows\system32\Boot
2013-05-18 15:19:45 ----D---- C:\Program Files\Windows Journal
2013-05-18 14:21:02 ----D---- C:\Windows\system32\restore
2013-05-18 14:20:51 ----D---- C:\Program Files\Windows NT
2013-05-18 14:05:50 ----D---- C:\Windows\system32\CodeIntegrity
2013-05-18 13:54:33 ----D---- C:\Windows\system32\sysprep
2013-05-18 13:52:00 ----D---- C:\Windows\CSC
2013-05-02 02:06:08 ----N---- C:\Windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2011-05-23 48992]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-11-08 307040]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-04-11 384800]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-12-10 127328]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2012-12-05 2321560]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-11-02 5174392]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-18 1255736]
-----------------EOF-----------------
Run by Matěj at 2013-06-11 22:02:48
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 178 GB (75%) free of 238 GB
Total RAM: 4094 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:03:05, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Matěj.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -update activex
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 5624 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgfws.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Internet Explorer\iexplore.exe"
C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe" /command_id=37336067-4119-470e-81a1-35470267d61a /client_id=4c00030e-5fe1-453d-9abd-ec5c08e1265e
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3347878 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3282304 /prefetch:2
notepad.exe "C:\Users\MATJ~1\AppData\Local\Temp\log.txt"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:333059 /prefetch:2
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=ccfa5e2c-2393-4330-b3ad-ab77c4bb4b6b /coreSdkOptions=30 /logConfFile="C:\ProgramData\AVG2012\temp\9bdad221-3f4f-4e0f-a197-1a575c201e4b-71c-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=04e0d423-a525-4633-a963-f21cf039d425 /coreSdkOptions=18 /logConfFile="C:\ProgramData\AVG2012\temp\e7650227-2fc5-4240-a3a6-3444c7453f7e-914-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3151193 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Matěj\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe [2013-05-27 514440]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 3 months======
2013-06-11 22:02:49 ----D---- C:\Program Files\trend micro
2013-06-11 22:02:48 ----D---- C:\rsit
2013-06-11 21:56:34 ----SHD---- C:\$RECYCLE.BIN
2013-06-11 21:44:48 ----D---- C:\Windows\temp
2013-06-11 21:44:47 ----A---- C:\ComboFix.txt
2013-06-11 21:39:07 ----A---- C:\Windows\zip.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWSC.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWREG.exe
2013-06-11 21:39:07 ----A---- C:\Windows\sed.exe
2013-06-11 21:39:07 ----A---- C:\Windows\PEV.exe
2013-06-11 21:39:07 ----A---- C:\Windows\NIRCMD.exe
2013-06-11 21:39:07 ----A---- C:\Windows\MBR.exe
2013-06-11 21:39:07 ----A---- C:\Windows\grep.exe
2013-06-03 14:03:32 ----A---- C:\Windows\ODBC.INI
2013-06-03 14:03:05 ----D---- C:\Program Files (x86)\Microsoft ActiveSync
2013-06-03 14:02:26 ----D---- C:\Windows\PCHEALTH
2013-06-03 14:02:26 ----D---- C:\Program Files (x86)\Microsoft Office
2013-06-02 23:12:05 ----D---- C:\Program Files (x86)\Adobe
2013-05-27 10:46:15 ----D---- C:\Program Files\CCleaner
2013-05-27 10:29:44 ----D---- C:\Users\Matěj\AppData\Roaming\Macromedia
2013-05-27 10:29:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-27 10:29:37 ----D---- C:\Windows\SYSWOW64\Macromed
2013-05-27 10:29:35 ----D---- C:\Windows\system32\Macromed
2013-05-27 10:29:03 ----D---- C:\ProgramData\Adobe
2013-05-27 01:25:20 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-05-27 01:25:01 ----D---- C:\ProgramData\NVIDIA
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvshext.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvmctray.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispgenco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-27 01:06:57 ----D---- C:\Users\Matěj\AppData\Roaming\NVIDIA
2013-05-27 00:42:18 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2012
2013-05-27 00:41:58 ----D---- C:\Windows\SYSWOW64\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\Windows\system32\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\$AVG
2013-05-27 00:40:36 ----D---- C:\ProgramData\AVG2012
2013-05-27 00:39:49 ----D---- C:\Program Files (x86)\AVG
2013-05-23 23:13:48 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvgenco64.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvdispco64.dll
2013-05-23 23:11:56 ----D---- C:\NVIDIA
2013-05-23 19:10:13 ----D---- C:\Users\Matěj\AppData\Roaming\Skype
2013-05-23 19:10:07 ----D---- C:\ProgramData\Skype
2013-05-21 21:31:42 ----D---- C:\Qoobox
2013-05-21 21:31:26 ----D---- C:\Windows\erdnt
2013-05-21 21:23:29 ----A---- C:\Windows\system32\drivers\stflt.sys
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-05-21 20:44:10 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprt.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpudd.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpcorets.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\aaclient.dll
2013-05-21 20:44:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-21 20:44:08 ----A---- C:\Windows\system32\mstscax.dll
2013-05-21 20:42:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\drivers\cng.sys
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\lsasrv.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-05-21 20:42:29 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-05-21 20:42:29 ----A---- C:\Windows\system32\qdvd.dll
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-05-19 21:48:08 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\fsutil.exe
2013-05-19 21:48:08 ----A---- C:\Windows\system32\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-05-19 21:48:07 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\storport.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-05-18 18:00:43 ----D---- C:\Program Files (x86)\StarCraft II
2013-05-18 17:44:14 ----D---- C:\Program Files (x86)\Google
2013-05-18 17:18:28 ----D---- C:\ProgramData\Blizzard Entertainment
2013-05-18 17:18:28 ----D---- C:\Program Files (x86)\Diablo III
2013-05-18 17:17:01 ----D---- C:\ProgramData\Battle.net
2013-05-18 16:07:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-18 16:01:12 ----D---- C:\Users\Matěj\AppData\Roaming\Adobe
2013-05-18 15:57:49 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-05-18 15:32:18 ----D---- C:\Windows\CheckSur
2013-05-18 15:30:29 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2013
2013-05-18 15:30:23 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-18 15:29:41 ----D---- C:\Users\Matěj\AppData\Roaming\TuneUp Software
2013-05-18 15:28:59 ----D---- C:\ProgramData\AVG2013
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\FntCache.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d2d1.dll
2013-05-18 15:26:41 ----SHD---- C:\Windows\Installer
2013-05-18 15:26:31 ----HD---- C:\ProgramData\Common Files
2013-05-18 15:26:31 ----D---- C:\ProgramData\MFAData
2013-05-18 15:24:44 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-18 15:24:42 ----D---- C:\Windows\system32\Wat
2013-05-18 14:59:01 ----A---- C:\Windows\system32\Wdfres.dll
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-05-18 14:54:48 ----A---- C:\Windows\system32\browserchoice.exe
2013-05-18 14:50:36 ----D---- C:\Windows\Panther
2013-05-18 14:49:54 ----A---- C:\Windows\system32\MRT.exe
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmfd.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFx.dll
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFHost.exe
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\wow64win.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\ntvdm64.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\conhost.exe
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64cpu.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\consent.exe
2013-05-18 14:44:09 ----A---- C:\Windows\system32\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\appinfo.dll
2013-05-18 14:44:00 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\Wpc.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\gameux.dll
2013-05-18 14:43:59 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-05-18 14:43:51 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-05-18 14:43:51 ----A---- C:\Windows\system32\tzres.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\CPFilters.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\tquery.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-05-18 14:43:21 ----A---- C:\Windows\system32\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\msscntrs.dll
2013-05-18 14:43:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-05-18 14:43:17 ----A---- C:\Windows\system32\ntshrui.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\user.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-05-18 14:43:14 ----A---- C:\Windows\system32\winsrv.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlasvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-05-18 14:42:56 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-05-18 14:42:56 ----A---- C:\Windows\system32\poqexec.exe
2013-05-18 14:42:47 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-05-18 14:42:47 ----A---- C:\Windows\system32\webio.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccp32.dll
2013-05-18 14:42:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42u.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-05-18 14:42:37 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-05-18 14:42:36 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-05-18 14:42:36 ----A---- C:\Windows\system32\quartz.dll
2013-05-18 14:42:35 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-18 14:42:34 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\system32\msxml3r.dll
2013-05-18 14:42:32 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-05-18 14:42:32 ----A---- C:\Windows\explorer.exe
2013-05-18 14:42:31 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\cdd.dll
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-18 14:42:24 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\netio.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-05-18 14:42:19 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\win32k.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpwsx.dll
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspisrv.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspicli.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\secur32.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\lsass.exe
2013-05-18 14:42:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsapi.dll
2013-05-18 14:42:15 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv.sys
2013-05-18 14:42:13 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-05-18 14:42:13 ----A---- C:\Windows\system32\dpnet.dll
2013-05-18 14:42:11 ----A---- C:\Windows\system32\profsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\crypt32.dll
2013-05-18 14:42:06 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-05-18 14:42:06 ----A---- C:\Windows\system32\wintrust.dll
2013-05-18 14:42:04 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-05-18 14:42:04 ----A---- C:\Windows\system32\usp10.dll
2013-05-18 14:42:02 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-05-18 14:42:01 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-05-18 14:42:01 ----A---- C:\Windows\system32\psisdecd.dll
2013-05-18 14:42:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\drivers\afd.sys
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winresume.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winload.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdusb.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdcom.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kd1394.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-05-18 14:41:54 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-05-18 14:41:54 ----A---- C:\Windows\system32\synceng.dll
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-18 14:41:53 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\taskhost.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\smss.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browser.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-05-18 14:41:50 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-05-18 14:41:50 ----A---- C:\Windows\system32\inetcomm.dll
2013-05-18 14:41:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\srcore.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-05-18 14:41:47 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-05-18 14:41:47 ----A---- C:\Windows\system32\msvcrt.dll
2013-05-18 14:41:46 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-05-18 14:41:46 ----A---- C:\Windows\system32\prevhost.exe
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleacc.dll
2013-05-18 14:41:44 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-05-18 14:41:44 ----A---- C:\Windows\system32\EncDec.dll
2013-05-18 14:41:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-05-18 14:41:42 ----A---- C:\Windows\system32\localspl.dll
2013-05-18 14:41:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-05-18 14:41:41 ----A---- C:\Windows\system32\ntdll.dll
2013-05-18 14:41:39 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-05-18 14:41:39 ----A---- C:\Windows\system32\cdosys.dll
2013-05-18 14:41:38 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-05-18 14:41:37 ----A---- C:\Windows\system32\spoolsv.exe
2013-05-18 14:41:37 ----A---- C:\Windows\splwow64.exe
2013-05-18 14:33:17 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-05-18 14:33:17 ----A---- C:\Windows\system32\packager.dll
2013-05-18 14:26:37 ----D---- C:\Program Files\NVIDIA Corporation
2013-05-18 14:26:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-18 14:24:51 ----A---- C:\Windows\system32\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wups2.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wucltux.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuaueng.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuauclt.exe
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wups.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wudriver.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wuapi.dll
2013-05-18 14:21:23 ----D---- C:\Users\Matěj\AppData\Roaming\Identities
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuwebv.dll
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuapp.exe
2013-05-18 14:21:03 ----SD---- C:\Users\Matěj\AppData\Roaming\Microsoft
2013-05-18 14:21:03 ----D---- C:\Users\Matěj\AppData\Roaming\Media Center Programs
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Šablony
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Plocha
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Oblíbené položky
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Nabídka Start
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Dokumenty
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Data aplikací
2013-05-18 14:20:51 ----D---- C:\Recovery
2013-05-18 13:54:12 ----D---- C:\Windows\SoftwareDistribution
2013-05-18 13:52:04 ----D---- C:\Windows\Prefetch
2013-05-18 13:51:23 ----ASH---- C:\pagefile.sys
2013-05-18 13:51:22 ----SHD---- C:\System Volume Information
2013-05-18 13:51:22 ----ASH---- C:\hiberfil.sys
2013-04-11 03:18:40 ----A---- C:\Windows\system32\drivers\avgtdia.sys
2013-03-14 22:07:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
======List of files/folders modified in the last 3 months======
2013-06-11 22:02:49 ----RD---- C:\Program Files
2013-06-11 21:56:12 ----D---- C:\Windows\SYSWOW64\drivers
2013-06-11 21:44:48 ----D---- C:\Windows
2013-06-11 21:43:38 ----A---- C:\Windows\system.ini
2013-06-11 21:42:16 ----D---- C:\Windows\SysWOW64
2013-06-11 21:42:16 ----D---- C:\Windows\AppPatch
2013-06-11 21:42:15 ----D---- C:\Program Files (x86)\Common Files
2013-06-11 21:38:52 ----D---- C:\Windows\system32\drivers
2013-06-11 21:38:11 ----D---- C:\Windows\System32
2013-06-11 21:38:11 ----D---- C:\Windows\inf
2013-06-11 21:38:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 21:32:28 ----D---- C:\Windows\system32\config
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot2
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot
2013-06-11 19:03:04 ----D---- C:\Windows\winsxs
2013-06-06 21:35:42 ----A---- C:\Windows\win.ini
2013-06-03 14:11:42 ----RSD---- C:\Windows\assembly
2013-06-03 14:11:30 ----RSD---- C:\Windows\Fonts
2013-06-03 14:03:05 ----RD---- C:\Program Files (x86)
2013-06-03 14:03:05 ----D---- C:\Windows\ShellNew
2013-06-03 14:02:26 ----SD---- C:\ProgramData\Microsoft
2013-06-03 14:00:25 ----D---- C:\Windows\system
2013-06-03 13:45:07 ----D---- C:\Windows\rescache
2013-05-27 10:46:17 ----D---- C:\Windows\system32\Tasks
2013-05-27 10:29:03 ----D---- C:\ProgramData
2013-05-27 01:25:08 ----D---- C:\Windows\system32\DriverStore
2013-05-27 01:24:40 ----D---- C:\Windows\Help
2013-05-26 23:47:12 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-23 23:16:06 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-23 23:16:06 ----D---- C:\Windows\system32\cs-CZ
2013-05-23 23:07:20 ----RD---- C:\Users
2013-05-21 22:04:10 ----D---- C:\Windows\system32\LogFiles
2013-05-21 21:07:25 ----D---- C:\Windows\Microsoft.NET
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\system32\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\drivers\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\PolicyDefinitions
2013-05-21 20:43:05 ----D---- C:\Windows\Logs
2013-05-21 20:43:05 ----D---- C:\Windows\debug
2013-05-19 21:45:10 ----D---- C:\Windows\system32\wdi
2013-05-18 17:44:23 ----D---- C:\Windows\Tasks
2013-05-18 15:58:05 ----D---- C:\Windows\SYSWOW64\migration
2013-05-18 15:58:05 ----D---- C:\Program Files\Internet Explorer
2013-05-18 15:58:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-18 15:58:04 ----D---- C:\Windows\system32\migration
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\da-DK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\system32\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\system32\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\system32\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\system32\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\da-DK
2013-05-18 15:19:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-05-18 15:19:57 ----D---- C:\Windows\ehome
2013-05-18 15:19:57 ----D---- C:\Program Files\Common Files\System
2013-05-18 15:19:46 ----D---- C:\Windows\system32\Boot
2013-05-18 15:19:45 ----D---- C:\Program Files\Windows Journal
2013-05-18 14:21:02 ----D---- C:\Windows\system32\restore
2013-05-18 14:20:51 ----D---- C:\Program Files\Windows NT
2013-05-18 14:05:50 ----D---- C:\Windows\system32\CodeIntegrity
2013-05-18 13:54:33 ----D---- C:\Windows\system32\sysprep
2013-05-18 13:52:00 ----D---- C:\Windows\CSC
2013-05-02 02:06:08 ----N---- C:\Windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2011-05-23 48992]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-11-08 307040]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-04-11 384800]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-12-10 127328]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2012-12-05 2321560]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-11-02 5174392]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-18 1255736]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119526
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o odborný komentář, zd je log ComboFix, RSIT bude
Tento log je po skenu CF zcela zbytečný. Viz výše. Posty byly sloučeny a příště pište poze do jednoho vlákna.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?