Avast našel virus ve složce windows

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
smudy
Návštěvník
Návštěvník
Příspěvky: 140
Registrován: 02 Zář 2008 11:54

Avast našel virus ve složce windows

#1 Příspěvek od smudy »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jan at 2013-07-31 06:05:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 48 GB (48%) free of 100 GB
Total RAM: 3998 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:05:35, on 31.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\LockKey\LockKey.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [LockKey] C:\Program Files (x86)\LockKey\LockKey.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session https://program.avast.com/api/?action=2 ... =0&p_wnf=0
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2699834175-4294218436-379074481-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2699834175-4294218436-379074481-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: Bluetooth.lnk = ?
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9934 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 27948512
\??\C:\Windows\system32\conhost.exe "-705318453-17225383092634959572620536511147710630-972727222966277845-45638255
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\servicing\TrustedInstaller.exe
taskeng.exe {259680A2-935E-4010-AA3E-15F5B770AD59}
"taskhost.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Elantech\ETDIntelligent.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\LockKey\LockKey.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\WinRAR\WinRAR.exe" "E:\gta\GTA-4---Full-game-(PC)-Crak+Patch+CZ.part1.rar"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1684.0.1434873717\875810754" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,20 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2778 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_41/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="1684.2.1769860594\1967922541" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_41/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="1684.4.399249598\689785337" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_41/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="1684.7.258922680\918306886" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/Compact2/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_41/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="1684.11.654375365\748385815" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\Jan\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09 242496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-06-07 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-06-07 398656]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-06-07 440128]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2012-08-08 2864016]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-07-29 8071680]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-07-29 6193152]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #0"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-07-12 846288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-05-21 291648]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-11-29 284440]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2011-12-20 507744]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2011-11-24 548864]
"LockKey"=C:\Program Files (x86)\LockKey\LockKey.exe [2011-08-25 337776]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-06-07 436224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-07-31 06:05:19 ----D---- C:\Program Files\trend micro
2013-07-31 06:05:18 ----D---- C:\rsit
2013-07-31 01:42:04 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-07-31 01:42:04 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-07-30 18:30:28 ----D---- C:\Users\Jan\AppData\Roaming\Adobe
2013-07-30 18:28:05 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-07-30 18:28:05 ----A---- C:\Windows\system32\DWrite.dll
2013-07-30 18:18:47 ----D---- C:\Windows\SYSWOW64\Wat
2013-07-30 18:18:47 ----D---- C:\Windows\system32\Wat
2013-07-30 17:06:02 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-07-30 17:06:01 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-07-30 17:06:00 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-07-30 17:06:00 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-07-30 17:05:58 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-07-30 17:05:58 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-07-30 17:05:57 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-07-30 17:05:53 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-07-30 17:05:50 ----A---- C:\Windows\system32\aswBoot.exe
2013-07-30 16:00:43 ----A---- C:\Windows\avastSS.scr
2013-07-30 16:00:30 ----D---- C:\Program Files\AVAST Software
2013-07-30 15:59:38 ----D---- C:\ProgramData\AVAST Software
2013-07-30 15:34:41 ----A---- C:\Windows\system32\MRT.exe
2013-07-30 15:21:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-07-30 15:21:29 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-30 15:21:29 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-07-30 15:21:29 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-07-30 15:21:29 ----A---- C:\Windows\system32\elshyph.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-07-30 15:21:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-07-30 15:21:27 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-07-30 15:21:26 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-07-30 15:21:26 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-07-30 15:21:26 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-07-30 15:21:25 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\url.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-07-30 15:21:24 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-07-30 15:21:23 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-07-30 15:21:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-07-30 15:21:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-07-30 15:21:23 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-07-30 15:21:23 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-30 15:21:23 ----A---- C:\Windows\system32\iertutil.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\wininet.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\webcheck.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\urlmon.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\url.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\msrating.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\msls31.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\licmgr10.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\jsproxy.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\iesetup.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\iernonce.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\iedkcs32.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\ieapfltr.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\ieapfltr.dat
2013-07-30 15:21:22 ----A---- C:\Windows\system32\ie4uinit.exe
2013-07-30 15:21:22 ----A---- C:\Windows\system32\icardie.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\dxtrans.dll
2013-07-30 15:21:22 ----A---- C:\Windows\system32\dxtmsft.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\wextract.exe
2013-07-30 15:21:21 ----A---- C:\Windows\system32\vbscript.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\pngfilt.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\occache.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\mshtmled.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\mshtml.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\mshta.exe
2013-07-30 15:21:21 ----A---- C:\Windows\system32\msfeedssync.exe
2013-07-30 15:21:21 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\msfeeds.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\jscript.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\inseng.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\imgutil.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\iexpress.exe
2013-07-30 15:21:21 ----A---- C:\Windows\system32\ieUnatt.exe
2013-07-30 15:21:21 ----A---- C:\Windows\system32\iepeers.dll
2013-07-30 15:21:21 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-07-30 15:21:20 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-07-30 15:21:20 ----A---- C:\Windows\system32\mshtmler.dll
2013-07-30 15:21:20 ----A---- C:\Windows\system32\jscript9.dll
2013-07-30 15:21:20 ----A---- C:\Windows\system32\ieui.dll
2013-07-30 15:21:20 ----A---- C:\Windows\system32\iesysprep.dll
2013-07-30 15:21:20 ----A---- C:\Windows\system32\ieframe.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-30 15:17:26 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-07-30 15:17:26 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\XpsPrint.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\WMPhoto.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\UIAnimation.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\FntCache.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\dxgi.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d11.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10warp.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10level9.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10core.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10_1.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d3d10.dll
2013-07-30 15:17:26 ----A---- C:\Windows\system32\d2d1.dll
2013-07-30 15:12:52 ----A---- C:\Windows\system32\browserchoice.exe
2013-07-30 15:01:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-07-30 15:01:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-07-30 15:01:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-07-30 15:01:15 ----A---- C:\Windows\system32\fontsub.dll
2013-07-30 15:01:15 ----A---- C:\Windows\system32\atmlib.dll
2013-07-30 15:01:15 ----A---- C:\Windows\system32\atmfd.dll
2013-07-30 14:53:45 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-07-30 14:53:45 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-07-30 14:53:45 ----A---- C:\Windows\system32\wmi.dll
2013-07-30 14:53:45 ----A---- C:\Windows\system32\imagehlp.dll
2013-07-30 14:53:45 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-07-30 08:22:24 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-07-30 08:22:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-07-30 08:22:24 ----A---- C:\Windows\system32\cdd.dll
2013-07-30 08:22:23 ----A---- C:\Windows\system32\odbctrac.dll
2013-07-30 08:22:23 ----A---- C:\Windows\system32\odbccu32.dll
2013-07-30 08:22:23 ----A---- C:\Windows\system32\odbccr32.dll
2013-07-30 08:22:23 ----A---- C:\Windows\system32\odbccp32.dll
2013-07-30 08:22:22 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-07-30 08:22:22 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-07-30 08:22:22 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-07-30 08:22:22 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-07-30 08:22:22 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-07-30 08:22:21 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-07-30 08:22:21 ----A---- C:\Windows\system32\poqexec.exe
2013-07-30 08:22:15 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-07-30 08:22:15 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-07-30 08:22:15 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-07-30 08:22:15 ----A---- C:\Windows\system32\tsgqec.dll
2013-07-30 08:22:15 ----A---- C:\Windows\system32\mstscax.dll
2013-07-30 08:22:15 ----A---- C:\Windows\system32\aaclient.dll
2013-07-30 08:22:12 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-07-30 08:22:12 ----A---- C:\Windows\system32\drivers\netio.sys
2013-07-30 08:22:12 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-07-30 08:22:10 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-07-30 08:22:10 ----A---- C:\Windows\system32\tzres.dll
2013-07-30 08:22:05 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-07-30 08:22:05 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-07-30 08:22:05 ----A---- C:\Windows\system32\sbe.dll
2013-07-30 08:22:05 ----A---- C:\Windows\system32\CPFilters.dll
2013-07-30 08:22:04 ----A---- C:\Windows\system32\shell32.dll
2013-07-30 08:22:03 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-07-30 08:22:03 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-07-30 08:22:03 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-07-30 08:22:03 ----A---- C:\Windows\system32\shdocvw.dll
2013-07-30 08:22:03 ----A---- C:\Windows\system32\consent.exe
2013-07-30 08:22:03 ----A---- C:\Windows\system32\authui.dll
2013-07-30 08:22:03 ----A---- C:\Windows\system32\appinfo.dll
2013-07-30 08:21:59 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-07-30 08:21:59 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-07-30 08:21:59 ----A---- C:\Windows\system32\quartz.dll
2013-07-30 08:21:59 ----A---- C:\Windows\system32\qdvd.dll
2013-07-30 08:21:57 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-07-30 08:21:57 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-07-30 08:21:57 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-07-30 08:21:56 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-07-30 08:21:56 ----A---- C:\Windows\system32\webio.dll
2013-07-30 08:21:56 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-07-30 08:21:53 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-07-30 08:21:53 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-07-30 08:21:53 ----A---- C:\Windows\system32\mfc42u.dll
2013-07-30 08:21:53 ----A---- C:\Windows\system32\mfc42.dll
2013-07-30 08:21:50 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-07-30 08:21:49 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-07-30 08:21:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-07-30 08:21:49 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\sspisrv.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\sspicli.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\schannel.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\secur32.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-07-30 08:21:49 ----A---- C:\Windows\system32\rdpwsx.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\lsass.exe
2013-07-30 08:21:49 ----A---- C:\Windows\system32\lsasrv.dll
2013-07-30 08:21:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-07-30 08:21:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-07-30 08:21:49 ----A---- C:\Windows\system32\drivers\cng.sys
2013-07-30 08:21:48 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-07-30 08:21:48 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-07-30 08:21:48 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-07-30 08:21:48 ----A---- C:\Windows\system32\msxml6.dll
2013-07-30 08:21:48 ----A---- C:\Windows\system32\msxml3r.dll
2013-07-30 08:21:48 ----A---- C:\Windows\system32\msxml3.dll
2013-07-30 08:21:47 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-07-30 08:21:47 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-07-30 08:21:47 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-07-30 08:21:47 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-07-30 08:21:47 ----A---- C:\Windows\system32\dnsapi.dll
2013-07-30 08:21:40 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-07-30 08:21:40 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-07-30 08:21:40 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-07-30 08:21:40 ----A---- C:\Windows\system32\qedit.dll
2013-07-30 08:21:40 ----A---- C:\Windows\system32\ncrypt.dll
2013-07-30 08:21:40 ----A---- C:\Windows\system32\dpnet.dll
2013-07-30 08:21:39 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-07-30 08:21:39 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-07-30 08:21:39 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-07-30 08:21:39 ----A---- C:\Windows\system32\wintrust.dll
2013-07-30 08:21:38 ----A---- C:\Windows\system32\KernelBase.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-07-30 08:21:37 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-07-30 08:21:37 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-07-30 08:21:37 ----A---- C:\Windows\system32\wow64win.dll
2013-07-30 08:21:37 ----A---- C:\Windows\system32\winsrv.dll
2013-07-30 08:21:37 ----A---- C:\Windows\system32\ntvdm64.dll
2013-07-30 08:21:37 ----A---- C:\Windows\system32\kernel32.dll
2013-07-30 08:21:37 ----A---- C:\Windows\system32\conhost.exe
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-07-30 08:21:36 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-07-30 08:21:36 ----A---- C:\Windows\SYSWOW64\user.exe
2013-07-30 08:21:36 ----A---- C:\Windows\system32\wow64cpu.dll
2013-07-30 08:21:36 ----A---- C:\Windows\system32\wow64.dll
2013-07-30 08:21:07 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-07-30 08:21:07 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-07-30 08:21:07 ----A---- C:\Windows\system32\drivers\srv.sys
2013-07-30 08:21:05 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-07-30 08:21:05 ----A---- C:\Windows\system32\psisdecd.dll
2013-07-30 08:21:05 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-07-30 08:20:42 ----A---- C:\Windows\system32\drivers\afd.sys
2013-07-30 08:20:39 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-07-30 08:20:39 ----A---- C:\Windows\system32\kerberos.dll
2013-07-30 08:20:39 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-07-30 08:20:19 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-07-30 08:20:19 ----A---- C:\Windows\system32\winresume.exe
2013-07-30 08:20:19 ----A---- C:\Windows\system32\winload.exe
2013-07-30 08:20:19 ----A---- C:\Windows\system32\synceng.dll
2013-07-30 08:20:19 ----A---- C:\Windows\system32\kdusb.dll
2013-07-30 08:20:19 ----A---- C:\Windows\system32\kdcom.dll
2013-07-30 08:20:19 ----A---- C:\Windows\system32\kd1394.dll
2013-07-30 08:20:18 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-07-30 08:20:18 ----A---- C:\Windows\system32\win32spl.dll
2013-07-30 08:20:18 ----A---- C:\Windows\system32\taskhost.exe
2013-07-30 08:20:17 ----A---- C:\Windows\system32\win32k.sys
2013-07-30 08:20:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-07-30 08:20:16 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-07-30 08:20:16 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-07-30 08:20:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-07-30 08:20:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-07-30 08:20:14 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-07-30 08:20:14 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-07-30 08:20:14 ----A---- C:\Windows\system32\netapi32.dll
2013-07-30 08:20:14 ----A---- C:\Windows\system32\browser.dll
2013-07-30 08:20:14 ----A---- C:\Windows\system32\browcli.dll
2013-07-30 08:20:13 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-07-30 08:20:13 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-07-30 08:20:13 ----A---- C:\Windows\system32\msvcrt.dll
2013-07-30 08:20:13 ----A---- C:\Windows\system32\inetcomm.dll
2013-07-30 08:20:13 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-07-30 08:20:11 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-07-30 08:20:11 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-07-30 08:20:11 ----A---- C:\Windows\system32\crypt32.dll
2013-07-30 08:20:11 ----A---- C:\Windows\system32\certutil.exe
2013-07-30 08:20:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-07-30 08:20:10 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-07-30 08:20:10 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-07-30 08:20:10 ----A---- C:\Windows\system32\cryptsvc.dll
2013-07-30 08:20:10 ----A---- C:\Windows\system32\cryptnet.dll
2013-07-30 08:20:10 ----A---- C:\Windows\system32\certenc.dll
2013-07-30 08:20:07 ----A---- C:\Windows\system32\localspl.dll
2013-07-30 08:20:04 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-07-30 08:20:04 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-07-30 08:20:04 ----A---- C:\Windows\system32\oleaut32.dll
2013-07-30 08:20:04 ----A---- C:\Windows\system32\oleacc.dll
2013-07-30 08:20:04 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-07-30 08:20:03 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-07-30 08:20:03 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-07-30 08:20:03 ----A---- C:\Windows\system32\EncDec.dll
2013-07-30 08:20:02 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-07-30 08:20:02 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-07-30 08:20:02 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-07-30 08:20:02 ----A---- C:\Windows\system32\smss.exe
2013-07-30 08:20:02 ----A---- C:\Windows\system32\csrsrv.dll
2013-07-30 08:19:47 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-07-30 08:19:47 ----A---- C:\Windows\system32\cdosys.dll
2013-07-30 08:19:45 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-07-30 08:19:45 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-07-30 08:19:45 ----A---- C:\Windows\system32\packager.dll
2013-07-30 08:19:45 ----A---- C:\Windows\system32\ntdll.dll
2013-07-30 07:53:58 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-07-30 07:53:58 ----A---- C:\Windows\system32\rdpcore.dll
2013-07-30 07:53:58 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-07-29 21:38:51 ----D---- C:\Users\Jan\AppData\Roaming\WinRAR
2013-07-29 21:38:48 ----D---- C:\Program Files\WinRAR
2013-07-29 21:27:05 ----A---- C:\Windows\system32\wups2.dll
2013-07-29 21:27:05 ----A---- C:\Windows\system32\wuauclt.exe
2013-07-29 21:27:04 ----A---- C:\Windows\system32\wucltux.dll
2013-07-29 21:27:04 ----A---- C:\Windows\system32\wuaueng.dll
2013-07-29 21:27:00 ----A---- C:\Windows\system32\wups.dll
2013-07-29 21:27:00 ----A---- C:\Windows\system32\wudriver.dll
2013-07-29 21:27:00 ----A---- C:\Windows\system32\wuapi.dll
2013-07-29 21:26:54 ----A---- C:\Windows\system32\wuwebv.dll
2013-07-29 21:26:54 ----A---- C:\Windows\system32\wuapp.exe
2013-07-29 19:59:06 ----D---- C:\Users\Jan\AppData\Roaming\Wargaming.net
2013-07-29 17:49:30 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-07-29 17:49:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-07-29 17:49:30 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-07-29 17:49:30 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-07-29 17:49:30 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-07-29 17:49:30 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-07-29 17:49:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-07-29 17:49:28 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-07-29 17:49:27 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-07-29 17:49:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-07-29 17:49:27 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-07-29 17:49:27 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-07-29 17:49:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-07-29 17:49:26 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-07-29 17:49:25 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-07-29 17:49:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-07-29 17:49:24 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-07-29 17:49:23 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\xinput1_3.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-07-29 17:49:22 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-07-29 17:49:21 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-07-29 17:49:21 ----A---- C:\Windows\system32\d3dx10.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-07-29 17:49:20 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\xinput1_2.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\xinput1_1.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-07-29 17:49:20 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-07-29 17:49:19 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-07-29 17:49:19 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-07-29 17:49:19 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-07-29 17:49:19 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-07-29 17:49:19 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-07-29 17:49:19 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-07-29 17:49:19 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-07-29 17:49:19 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-07-29 17:49:18 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-07-29 17:49:18 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-07-29 17:49:18 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-07-29 17:49:18 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-07-29 17:49:18 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-07-29 17:49:18 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-07-29 17:49:17 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-07-29 17:49:17 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-07-29 17:49:17 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-07-29 17:49:17 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-07-29 17:10:16 ----D---- C:\Windows\SYSWOW64\directx
2013-07-29 17:10:15 ----D---- C:\Games
2013-07-29 17:03:30 ----D---- C:\Program Files (x86)\winrar full cz 64bit
2013-07-29 16:23:46 ----D---- C:\Program Files (x86)\Google
2013-07-29 16:15:14 ----D---- C:\Users\Jan\AppData\Roaming\Intel Corporation
2013-07-29 16:12:24 ----D---- C:\Windows\SYSWOW64\NV
2013-07-29 16:12:24 ----D---- C:\Windows\system32\NV
2013-07-29 16:11:20 ----HD---- C:\Windows\system32\WLANProfiles
2013-07-29 16:10:56 ----D---- C:\ProgramData\OneKey Recovery
2013-07-29 16:10:01 ----D---- C:\ProgramData\Temp
2013-07-29 16:09:24 ----D---- C:\Program Files (x86)\LockKey
2013-07-29 16:09:09 ----D---- C:\Windows\Downloaded Installations
2013-07-29 16:08:02 ----ASHD---- C:\UserGuidePDF
2013-07-29 16:07:18 ----D---- C:\Program Files\DIFX
2013-07-29 16:07:15 ----A---- C:\Windows\system32\LenovoSDKEmSubSystem.dll
2013-07-29 16:07:15 ----A---- C:\Windows\system32\drivers\LhdX64.sys
2013-07-29 16:06:45 ----D---- C:\ProgramData\Downloaded Installations
2013-07-29 16:06:21 ----D---- C:\Program Files (x86)\USB Camera
2013-07-29 16:06:19 ----A---- C:\Windows\vm331Rmv.ini
2013-07-29 16:06:19 ----A---- C:\Windows\SYSWOW64\vm331Rmv.ini
2013-07-29 16:06:19 ----A---- C:\Windows\SYSWOW64\Reg331Unstal.dll
2013-07-29 16:06:19 ----A---- C:\Windows\system32\VmCoinst.dll
2013-07-29 16:06:19 ----A---- C:\Windows\system32\drivers\vm331avs.sys
2013-07-29 16:06:19 ----A---- C:\Windows\Reg331Unstal.dll
2013-07-29 16:06:14 ----D---- C:\Program Files (x86)\Vimicro
2013-07-29 16:05:06 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-07-29 16:02:36 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-29 16:01:08 ----A---- C:\Windows\system32\drivers\btwampfl.sys
2013-07-29 16:00:07 ----A---- C:\Windows\system32\drivers\btwrchid.sys
2013-07-29 16:00:07 ----A---- C:\Windows\system32\drivers\btwl2cap.sys
2013-07-29 16:00:07 ----A---- C:\Windows\system32\drivers\btwavdt.sys
2013-07-29 16:00:07 ----A---- C:\Windows\system32\drivers\btwaudio.sys
2013-07-29 16:00:07 ----A---- C:\Windows\system32\drivers\bcbtums.sys
2013-07-29 15:59:43 ----D---- C:\Program Files\Lenovo
2013-07-29 15:58:22 ----D---- C:\Program Files\Elantech
2013-07-29 15:58:16 ----A---- C:\Windows\system32\drivers\ETD.sys
2013-07-29 15:55:49 ----A---- C:\Windows\system32\drivers\BCMWL664.SYS
2013-07-29 15:55:49 ----A---- C:\Windows\system32\bcmwlcoi.dll
2013-07-29 15:55:48 ----A---- C:\Windows\system32\bcmihvui64.dll
2013-07-29 15:55:47 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2013-07-29 15:55:44 ----D---- C:\Program Files (x86)\Lenovo
2013-07-29 15:54:27 ----D---- C:\Windows\SYSWOW64\sda
2013-07-29 15:54:14 ----RA---- C:\Windows\system32\drivers\rtsuvstor.sys
2013-07-29 15:54:14 ----R---- C:\Windows\system32\drivers\diskperf64.sys
2013-07-29 15:54:13 ----D---- C:\Program Files (x86)\Realtek
2013-07-29 15:54:13 ----A---- C:\Windows\SYSWOW64\RtsUVStoricon.dll
2013-07-29 15:53:46 ----A---- C:\Windows\system32\drivers\L1C62x64.sys
2013-07-29 15:53:31 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2013-07-29 15:52:28 ----D---- C:\Program Files (x86)\Dolby Advanced Audio v2
2013-07-29 15:52:20 ----A---- C:\Windows\SAII_LOG.TXT
2013-07-29 15:51:41 ----D---- C:\Program Files\CONEXANT
2013-07-29 15:51:40 ----A---- C:\Windows\system32\UCI64A87.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\EEP64A.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\EEL64A.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\EEG64A.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\EED64A.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\EEA64A.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\drivers\Mixer.ini
2013-07-29 15:51:40 ----A---- C:\Windows\system32\CxPageMaster64.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\CXHDMI64.dll
2013-07-29 15:51:40 ----A---- C:\Windows\system32\CX64AP58.dll
2013-07-29 15:51:38 ----A---- C:\Windows\system32\drivers\CHDRT64.sys
2013-07-29 15:50:18 ----D---- C:\ProgramData\NVIDIA
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvvsvc.exe
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvsvcr.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvsvc64.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvshext.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvmctray.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nvcpl.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nv3dappshextr.dll
2013-07-29 15:50:05 ----A---- C:\Windows\system32\nv3dappshext.dll
2013-07-29 15:50:04 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2013-07-29 15:49:47 ----D---- C:\ProgramData\NVIDIA Corporation
2013-07-29 15:49:45 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-07-29 15:49:40 ----A---- C:\Windows\system32\nvgenco64.dll
2013-07-29 15:49:40 ----A---- C:\Windows\system32\nvdispco64.dll
2013-07-29 15:49:27 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-07-29 15:49:27 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-07-29 15:49:27 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-07-29 15:49:27 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-07-29 15:49:27 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2013-07-29 15:49:26 ----A---- C:\Windows\system32\nvoglv64.dll
2013-07-29 15:49:25 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-07-29 15:49:24 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-07-29 15:49:24 ----A---- C:\Windows\system32\nvinitx.dll
2013-07-29 15:49:24 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-07-29 15:49:23 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2013-07-29 15:49:23 ----A---- C:\Windows\system32\nvdecodemft.dll
2013-07-29 15:49:22 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-07-29 15:49:21 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-07-29 15:49:21 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-07-29 15:49:21 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-07-29 15:49:21 ----A---- C:\Windows\system32\nvcuvid.dll
2013-07-29 15:49:21 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-07-29 15:49:20 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-07-29 15:49:20 ----A---- C:\Windows\system32\nvcuda.dll
2013-07-29 15:49:19 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-07-29 15:49:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-07-29 15:49:18 ----A---- C:\Windows\system32\nvcompiler.dll
2013-07-29 15:49:18 ----A---- C:\Windows\system32\nvapi64.dll
2013-07-29 15:48:50 ----D---- C:\Program Files\NVIDIA Corporation
2013-07-29 15:47:09 ----A---- C:\Windows\system32\IntcDAuC.dll
2013-07-29 15:47:09 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\SYSWOW64\ig7icd32.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\OpenCL.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\iglhsip64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\iglhcp64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxtray.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxTMM.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxsrvc.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxsrvc.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxress.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxpph.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxpers.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxext.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxexps.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxdo.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxdev.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxCoIn_v2778.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxcmrt64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igfxcmjit64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igdumd64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igdrcl64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igdfcl64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igdde64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igdbcl64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\igd10umd64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\ig7icd64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\hkcmd.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\hccutils.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\GfxUI.exe
2013-07-29 15:46:50 ----A---- C:\Windows\system32\gfxSrvc.dll
2013-07-29 15:46:50 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2013-07-29 15:46:50 ----A---- C:\Windows\system32\difx64.exe
2013-07-29 15:45:11 ----RA---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2013-07-29 15:45:05 ----A---- C:\Windows\SYSWOW64\log.txt
2013-07-29 15:43:29 ----A---- C:\Windows\system32\drivers\iaStor.sys
2013-07-29 15:43:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-07-29 15:43:27 ----D---- C:\Users\Jan\AppData\Roaming\InstallShield
2013-07-29 15:43:27 ----D---- C:\ProgramData\InstallShield
2013-07-29 15:42:41 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2013-07-29 15:34:39 ----A---- C:\Windows\system32\drivers\iusb3hcs.sys
2013-07-29 15:34:29 ----A---- C:\Windows\system32\drivers\iusb3xhc.sys
2013-07-29 15:34:28 ----A---- C:\Windows\system32\drivers\iusb3hub.sys
2013-07-29 15:34:18 ----D---- C:\Intel
2013-07-29 15:28:45 ----D---- C:\Users\Jan\AppData\Roaming\Intel
2013-07-29 15:28:37 ----D---- C:\ProgramData\Roaming
2013-07-29 15:28:10 ----D---- C:\ProgramData\Intel
2013-07-29 15:28:10 ----D---- C:\Program Files\Intel
2013-07-29 15:28:10 ----D---- C:\Program Files\Common Files\Intel
2013-07-29 15:28:10 ----D---- C:\Program Files (x86)\Intel
2013-07-29 15:28:10 ----D---- C:\Program Files (x86)\Cisco
2013-07-29 15:27:11 ----SHD---- C:\Windows\Installer
2013-07-29 14:57:53 ----D---- C:\Users\Jan\AppData\Roaming\Identities
2013-07-29 14:57:40 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2013-07-29 14:57:40 ----D---- C:\Users\Jan\AppData\Roaming\Media Center Programs
2013-07-29 14:57:35 ----SHD---- C:\Recovery
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Šablony
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Plocha
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Oblíbené položky
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Nabídka Start
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Dokumenty
2013-07-29 14:57:35 ----SHD---- C:\ProgramData\Data aplikací
2013-07-28 15:47:12 ----D---- C:\Windows\Panther
2013-07-28 15:47:00 ----RASH---- C:\BOOTSECT.BAK
2013-07-28 15:46:58 ----SHD---- C:\Boot
2013-07-28 14:50:43 ----D---- C:\Windows\SoftwareDistribution
2013-07-28 14:48:27 ----D---- C:\Windows\Prefetch
2013-07-28 14:47:39 ----ASH---- C:\pagefile.sys
2013-07-28 14:47:38 ----SHD---- C:\System Volume Information
2013-07-28 14:47:38 ----ASH---- C:\hiberfil.sys

smudy
Návštěvník
Návštěvník
Příspěvky: 140
Registrován: 02 Zář 2008 11:54

Re: Avast našel virus ve složce windows

#2 Příspěvek od smudy »

======List of files/folders modified in the last 1 month======

2013-07-31 06:05:23 ----D---- C:\Windows\Temp
2013-07-31 06:05:19 ----RD---- C:\Program Files
2013-07-31 06:02:43 ----D---- C:\Windows\System32
2013-07-31 06:02:43 ----D---- C:\Windows\inf
2013-07-31 06:02:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-07-31 03:47:19 ----D---- C:\Windows\system32\config
2013-07-31 03:16:51 ----D---- C:\Windows\winsxs
2013-07-31 03:15:35 ----D---- C:\Windows\system32\DriverStore
2013-07-31 03:15:35 ----D---- C:\Windows\system32\drivers
2013-07-31 03:00:21 ----D---- C:\Windows\SysWOW64
2013-07-31 01:41:34 ----D---- C:\Windows\system32\catroot2
2013-07-31 01:41:34 ----D---- C:\Windows\system32\catroot
2013-07-30 20:24:18 ----D---- C:\Windows\system32\drivers\UMDF
2013-07-30 19:10:11 ----D---- C:\Windows\rescache
2013-07-30 19:09:35 ----D---- C:\Windows\Logs
2013-07-30 18:51:09 ----RSD---- C:\Windows\assembly
2013-07-30 18:51:09 ----D---- C:\Windows\Microsoft.NET
2013-07-30 18:25:14 ----D---- C:\Windows\system32\wdi
2013-07-30 18:19:08 ----D---- C:\Program Files\Common Files\System
2013-07-30 18:19:07 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-07-30 18:19:07 ----D---- C:\Windows\system32\cs-CZ
2013-07-30 18:19:07 ----D---- C:\Windows\ehome
2013-07-30 18:19:06 ----D---- C:\Program Files (x86)\Windows Defender
2013-07-30 18:19:05 ----D---- C:\Program Files\Windows Defender
2013-07-30 18:19:05 ----D---- C:\Program Files\Internet Explorer
2013-07-30 18:19:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-30 18:19:04 ----D---- C:\Windows\SYSWOW64\migration
2013-07-30 18:19:04 ----D---- C:\Windows\SYSWOW64\en-US
2013-07-30 18:19:03 ----D---- C:\Windows\system32\migration
2013-07-30 18:19:03 ----D---- C:\Windows\system32\en-US
2013-07-30 18:19:03 ----D---- C:\Windows\PolicyDefinitions
2013-07-30 18:19:01 ----RSD---- C:\Windows\Fonts
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\it-IT
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-07-30 18:19:01 ----D---- C:\Windows\SYSWOW64\el-GR
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\es-ES
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\de-DE
2013-07-30 18:19:00 ----D---- C:\Windows\SYSWOW64\da-DK
2013-07-30 18:18:56 ----D---- C:\Windows\system32\pt-PT
2013-07-30 18:18:56 ----D---- C:\Windows\system32\pt-BR
2013-07-30 18:18:56 ----D---- C:\Windows\system32\pl-PL
2013-07-30 18:18:56 ----D---- C:\Windows\system32\ko-KR
2013-07-30 18:18:56 ----D---- C:\Windows\system32\it-IT
2013-07-30 18:18:55 ----D---- C:\Windows\system32\zh-TW
2013-07-30 18:18:55 ----D---- C:\Windows\system32\zh-HK
2013-07-30 18:18:55 ----D---- C:\Windows\system32\zh-CN
2013-07-30 18:18:55 ----D---- C:\Windows\system32\tr-TR
2013-07-30 18:18:55 ----D---- C:\Windows\system32\sv-SE
2013-07-30 18:18:55 ----D---- C:\Windows\system32\ru-RU
2013-07-30 18:18:55 ----D---- C:\Windows\system32\nl-NL
2013-07-30 18:18:55 ----D---- C:\Windows\system32\nb-NO
2013-07-30 18:18:55 ----D---- C:\Windows\system32\ja-JP
2013-07-30 18:18:55 ----D---- C:\Windows\system32\hu-HU
2013-07-30 18:18:55 ----D---- C:\Windows\system32\fr-FR
2013-07-30 18:18:55 ----D---- C:\Windows\system32\fi-FI
2013-07-30 18:18:55 ----D---- C:\Windows\system32\es-ES
2013-07-30 18:18:55 ----D---- C:\Windows\system32\el-GR
2013-07-30 18:18:55 ----D---- C:\Windows\system32\de-DE
2013-07-30 18:18:55 ----D---- C:\Windows\system32\da-DK
2013-07-30 18:18:45 ----D---- C:\Windows\AppPatch
2013-07-30 18:18:41 ----D---- C:\Windows\system32\Boot
2013-07-30 18:18:39 ----D---- C:\Program Files\Windows Journal
2013-07-30 17:05:56 ----D---- C:\Windows\system32\Tasks
2013-07-30 16:00:43 ----D---- C:\Windows
2013-07-30 15:59:38 ----HD---- C:\ProgramData
2013-07-30 15:34:43 ----D---- C:\Windows\debug
2013-07-29 17:03:30 ----RD---- C:\Program Files (x86)
2013-07-29 16:40:05 ----SD---- C:\ProgramData\Microsoft
2013-07-29 16:23:47 ----D---- C:\Windows\Tasks
2013-07-29 16:17:24 ----D---- C:\Windows\system32\NDF
2013-07-29 16:16:41 ----D---- C:\Program Files (x86)\Common Files
2013-07-29 16:07:15 ----D---- C:\Windows\SYSWOW64\drivers
2013-07-29 16:06:21 ----D---- C:\Windows\twain_32
2013-07-29 16:06:21 ----D---- C:\Windows\system
2013-07-29 15:50:17 ----RD---- C:\Users
2013-07-29 15:50:04 ----D---- C:\Windows\Help
2013-07-29 15:44:55 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-07-29 15:28:10 ----D---- C:\Program Files\Common Files
2013-07-29 15:27:56 ----D---- C:\Windows\system32\restore
2013-07-29 15:01:54 ----D---- C:\Windows\system32\CodeIntegrity
2013-07-29 14:57:50 ----SHD---- C:\$Recycle.Bin
2013-07-29 14:57:35 ----D---- C:\Windows\system32\Recovery
2013-07-29 14:57:35 ----D---- C:\Program Files\Windows NT
2013-07-28 14:50:38 ----D---- C:\Windows\system32\sysprep
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 65336]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-07-30 189936]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-29 568600]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-05-21 19264]
R0 LHDmgr;LHDmgr; C:\Windows\System32\DRIVERS\LhdX64.sys [2013-07-29 39008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-06-22 29032]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 72016]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-07-30 1030952]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-07-30 378944]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 64288]
R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2013-07-29 30816]
R3 AMPPAL;Virtuální adaptér Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-12-05 195584]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-02-02 134696]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-10-27 4746304]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-02-02 615976]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-02-02 184360]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-02-02 211496]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2012-02-02 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2012-02-02 21544]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2012-01-31 1601152]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2012-08-07 311632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-07 14760096]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-05-21 357184]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-05-21 789824]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-03-02 104048]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 vm331avs;Digital Camera 1; C:\Windows\System32\Drivers\vm331avs.sys [2011-12-06 952832]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Protokol Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed; C:\Windows\system32\DRIVERS\amppal.sys [2011-12-05 195584]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2011-11-15 313960]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-12-05 659968]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-12-05 135952]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-02-01 945440]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-12-08 618256]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-29 161560]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-29 277784]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-06-23 890216]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-06-22 2458984]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-12-08 148752]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-29 363800]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2011-12-08 594704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29 116648]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-06-07 276288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-29 116648]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-12-08 273168]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-07-30 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Avast našel virus ve složce windows

#3 Příspěvek od vyosek »

Zdravim :)

:arrow: Kde jej nasel, nejaky screen by byl pripadne?

:arrow: Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/
  • Ulozte nejlepe na Plochu a rozbalte
  • Spustte kliknutim na mbanr
  • Nyni postupne kliknete na Next a Update
  • Po dokonceni update (aktualizace) databaze kliknete opet na Next
  • Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
  • Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
  • Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
  • Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
  • PC bude restartovan
  • Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte
:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

smudy
Návštěvník
Návštěvník
Příspěvky: 140
Registrován: 02 Zář 2008 11:54

Re: Avast našel virus ve složce windows

#4 Příspěvek od smudy »

Obrázek nemám
Naposledy upravil(a) smudy dne 31 Črc 2013 17:09, celkem upraveno 1 x.

smudy
Návštěvník
Návštěvník
Příspěvky: 140
Registrován: 02 Zář 2008 11:54

Re: Avast našel virus ve složce windows

#5 Příspěvek od smudy »

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.31.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Jan :: JAN-PC [administrátor]

31.7.2013 17:47:31
MBAM-log-2013-07-31 (18-06-02).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 303706
Uplynulý čas: 18 minut, 6 sekund

Nalezené procesy v paměti: 1
C:\Windows\inf\msksfx\msksfx.exe (BitcoinMiner) -> 3756 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Windows\inf\msksfx\msksfx.exe (BitcoinMiner) -> Nebyla provedena žádná instrukce.

(konec)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Avast našel virus ve složce windows

#6 Příspěvek od vyosek »

:arrow: Nalezy MBAMu smazte

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět