spomalene prehliadace

[melondubnica]

Dobry den pred dvoma mesiacmi som kupil new PC, pravidelne sa aktualizuje, antivirak mam norton s licenciou ale v poslednej dobe sa spomalil pc a do prehliadacov sa mi dostala neznama adresa
http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198

z mozili som to odstranil preinstalovanim ale mam podozrenie ze sa jedna o virus, lebo mozila nabiehala aj niekolko minut.
poprosil by som o kontrolu logu dakujem a parejem prijemny den.

Logfile of random's system information tool 1.08 (written by random/random)
Run by gabo at 2013-10-12 12:13:45
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 56 GB (56%) free of 100 GB
Total RAM: 3998 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:13:52, on 12. 10. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\gabo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.azet.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-389219554-2834428210-2938922044-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-389219554-2834428210-2938922044-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 11341 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe" /c /a /s UserSession2
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe"
"C:\Program Files (x86)\USB Camera2\VM332_STI.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{F7279719-D34C-4A3F-A5F7-6D309323252A}
{9BFC2F7E-4E85-4622-B198-24E4CAC29ACB}
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe"
"c:\program files (x86)\teamviewer\version6\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Program Files (x86)\TeamViewer\Version6\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version6\TeamViewer6_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version6\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version6\TeamViewer6_Logfile.log
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\gabo\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll [2013-05-30 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-08 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-04-28 52352]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll [2013-05-30 509776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [2012-04-28 1022592]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [2012-04-28 801920]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-14 441968]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-08-22 8079408]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-08-22 6199128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2007-12-13 1688872]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2013-07-02 248208]
""= []
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [2011-12-09 548864]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-11-29 284440]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-05-21 291648]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11 958576]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"NBKeyScan"=C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-10-12 12:13:45 ----D---- C:\rsit
2013-10-12 12:13:45 ----D---- C:\Program Files\trend micro
2013-10-09 21:44:38 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-09 20:44:09 ----D---- C:\ProgramData\eSafe
2013-10-09 20:43:29 ----D---- C:\ProgramData\BitGuard
2013-10-09 20:43:00 ----D---- C:\ProgramData\BonanzaDealsLive
2013-10-09 20:43:00 ----D---- C:\Program Files (x86)\BonanzaDealsLive
2013-10-09 20:42:56 ----D---- C:\Users\gabo\AppData\Roaming\AffiliatedUpdate
2013-10-09 20:42:52 ----D---- C:\ProgramData\Babylon
2013-10-09 20:42:52 ----D---- C:\Program Files (x86)\BonanzaDeals
2013-10-09 05:54:55 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-09 05:54:55 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-09 05:54:55 ----A---- C:\Windows\system32\ieui.dll
2013-10-09 05:54:54 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-09 05:54:54 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-09 05:54:54 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-09 05:54:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-09 05:54:54 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 05:54:54 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-09 05:54:54 ----A---- C:\Windows\system32\iesetup.dll
2013-10-09 05:54:54 ----A---- C:\Windows\system32\iertutil.dll
2013-10-09 05:54:54 ----A---- C:\Windows\system32\iernonce.dll
2013-10-09 05:54:54 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-09 05:54:53 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-09 05:54:53 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-09 05:54:53 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-09 05:54:53 ----A---- C:\Windows\system32\jscript9.dll
2013-10-09 05:54:53 ----A---- C:\Windows\system32\jscript.dll
2013-10-09 05:54:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-09 05:54:52 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-09 05:54:52 ----A---- C:\Windows\system32\urlmon.dll
2013-10-09 05:54:51 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-09 05:54:51 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-09 05:54:51 ----A---- C:\Windows\system32\wininet.dll
2013-10-09 05:54:51 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-09 05:54:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-09 05:54:50 ----A---- C:\Windows\system32\ieframe.dll
2013-10-09 05:54:49 ----A---- C:\Windows\system32\mshtml.dll
2013-10-09 05:54:47 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-09 05:45:34 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-09 05:45:34 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-09 05:45:34 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-09 05:45:34 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-09 05:45:34 ----A---- C:\Windows\system32\davclnt.dll
2013-10-09 05:45:31 ----A---- C:\Windows\system32\win32k.sys
2013-10-09 05:45:30 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-09 05:45:28 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\tdh.dll
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-09 05:45:27 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-09 05:45:27 ----A---- C:\Windows\system32\wow64.dll
2013-10-09 05:45:27 ----A---- C:\Windows\system32\tdh.dll
2013-10-09 05:45:27 ----A---- C:\Windows\system32\ntdll.dll
2013-10-09 05:45:27 ----A---- C:\Windows\system32\advapi32.dll
2013-10-09 05:45:26 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2013-10-09 05:45:26 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-09 05:45:25 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-09 05:45:25 ----A---- C:\Windows\system32\mswsock.dll
2013-10-09 05:45:25 ----A---- C:\Windows\system32\drivers\usbser.sys
2013-10-09 05:45:25 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-09 05:45:25 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-09 05:45:24 ----A---- C:\Windows\system32\atmfd.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-09 05:45:23 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-09 05:45:23 ----A---- C:\Windows\system32\lpk.dll
2013-10-09 05:45:23 ----A---- C:\Windows\system32\fontsub.dll
2013-10-09 05:45:23 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-09 05:45:23 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-09 05:45:23 ----A---- C:\Windows\system32\dciman32.dll
2013-10-09 05:45:23 ----A---- C:\Windows\system32\comctl32.dll
2013-10-09 05:45:23 ----A---- C:\Windows\system32\atmlib.dll
2013-10-09 05:45:21 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-09 05:45:07 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 05:45:07 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 05:44:02 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-10-09 05:44:01 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-01 08:35:56 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-09-22 06:52:06 ----D---- C:\Users\gabo\AppData\Roaming\WinRAR
2013-09-22 04:26:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-09-22 04:26:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-09-22 04:26:30 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-09-22 04:26:30 ----A---- C:\Windows\system32\DWrite.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\url.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-09-21 05:52:31 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\wextract.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\webcheck.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\vbscript.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\url.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\pngfilt.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\occache.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\msrating.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\msls31.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\mshtmler.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\mshtmled.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\mshta.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\msfeedssync.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\licmgr10.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\inseng.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\imgutil.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\iexpress.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\ieUnatt.exe
2013-09-21 05:52:31 ----A---- C:\Windows\system32\iepeers.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\iedkcs32.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\ieapfltr.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\icardie.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\elshyph.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\dxtrans.dll
2013-09-21 05:52:31 ----A---- C:\Windows\system32\dxtmsft.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-21 05:51:39 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-09-21 05:51:39 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\XpsPrint.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\WMPhoto.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\UIAnimation.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\FntCache.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\dxgi.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10warp.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10level9.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10core.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10_1.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d3d10.dll
2013-09-21 05:51:39 ----A---- C:\Windows\system32\d2d1.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-21 05:26:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-21 05:26:26 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-09-21 05:26:26 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-09-21 05:26:26 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-09-21 05:26:26 ----A---- C:\Windows\system32\winsrv.dll
2013-09-21 05:26:26 ----A---- C:\Windows\system32\smss.exe
2013-09-21 05:26:26 ----A---- C:\Windows\system32\KernelBase.dll
2013-09-21 05:26:26 ----A---- C:\Windows\system32\kernel32.dll
2013-09-21 05:26:26 ----A---- C:\Windows\system32\csrsrv.dll
2013-09-21 05:26:26 ----A---- C:\Windows\system32\conhost.exe
2013-09-21 05:26:26 ----A---- C:\Windows\system32\apisetschema.dll
2013-09-21 05:26:22 ----A---- C:\Windows\system32\authui.dll
2013-09-21 05:26:21 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-09-21 05:26:21 ----A---- C:\Windows\system32\consent.exe
2013-09-21 05:26:21 ----A---- C:\Windows\system32\appinfo.dll
2013-09-21 05:26:13 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-09-21 05:26:13 ----A---- C:\Windows\system32\cdd.dll
2013-09-21 05:26:09 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-09-21 05:26:09 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-09-21 05:26:09 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-09-21 05:26:09 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-09-21 05:26:09 ----A---- C:\Windows\system32\wintrust.dll
2013-09-21 05:26:09 ----A---- C:\Windows\system32\cryptsvc.dll
2013-09-21 05:26:09 ----A---- C:\Windows\system32\cryptnet.dll
2013-09-21 05:26:09 ----A---- C:\Windows\system32\crypt32.dll
2013-09-21 05:26:07 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-09-21 05:26:07 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-09-21 05:26:07 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-09-21 05:26:07 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-09-21 05:26:04 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-09-21 05:26:04 ----A---- C:\Windows\system32\tzres.dll
2013-09-21 05:25:58 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-09-21 05:25:58 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-09-21 05:25:58 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-09-21 05:25:57 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-09-21 05:25:57 ----A---- C:\Windows\system32\cryptdlg.dll
2013-09-21 05:25:38 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-09-21 05:25:38 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-09-21 05:25:30 ----A---- C:\Windows\system32\taskhost.exe
2013-09-21 05:25:30 ----A---- C:\Windows\system32\shell32.dll
2013-09-21 05:25:29 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-09-21 05:25:28 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-09-21 05:25:28 ----A---- C:\Windows\system32\shdocvw.dll
2013-09-21 05:25:27 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-09-21 05:25:27 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-09-21 05:25:27 ----A---- C:\Windows\system32\win32spl.dll
2013-09-21 05:25:27 ----A---- C:\Windows\system32\rdpcorets.dll
2013-09-21 05:25:27 ----A---- C:\Windows\system32\qedit.dll
2013-09-21 05:25:27 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-09-21 05:24:20 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-09-21 05:24:20 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-09-21 05:24:20 ----A---- C:\Windows\system32\certutil.exe
2013-09-21 05:24:20 ----A---- C:\Windows\system32\certenc.dll
2013-09-21 05:24:00 ----A---- C:\Windows\system32\wwansvc.dll
2013-09-21 05:24:00 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-09-21 05:23:00 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-09-21 05:23:00 ----A---- C:\Windows\system32\d3d11.dll
2013-09-21 05:22:26 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-09-21 05:22:26 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-09-21 05:22:26 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-09-21 05:22:26 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\nlasvc.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\nlaapi.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\netevent.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\netcorehc.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\ncsi.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-09-21 05:22:26 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-09-21 05:20:32 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-09-20 17:49:23 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2013-09-19 13:28:45 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-09-19 13:28:45 ----A---- C:\Windows\system32\rpcrt4.dll
2013-09-18 09:54:16 ----D---- C:\Windows\system32\SPReview
2013-09-18 09:53:35 ----D---- C:\Windows\system32\EventProviders
2013-09-18 09:43:29 ----A---- C:\Windows\system32\netfxperf.dll
2013-09-18 09:43:29 ----A---- C:\Windows\system32\dfshim.dll
2013-09-18 09:43:24 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-09-18 09:43:21 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-09-18 09:43:21 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-09-18 09:43:16 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-09-18 09:43:16 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-09-18 09:43:16 ----A---- C:\Windows\system32\tssrvlic.dll
2013-09-18 09:43:16 ----A---- C:\Windows\system32\sysmain.dll
2013-09-18 09:43:16 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-09-18 09:43:15 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-09-18 09:43:15 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-09-18 09:43:14 ----A---- C:\Windows\system32\wmp.dll
2013-09-18 09:43:13 ----A---- C:\Windows\system32\mscoree.dll
2013-09-18 09:43:12 ----A---- C:\Windows\system32\secproc_isv.dll
2013-09-18 09:43:12 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-09-18 09:43:12 ----A---- C:\Windows\system32\mf.dll
2013-09-18 09:43:11 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-09-18 09:43:11 ----A---- C:\Windows\system32\xpsservices.dll
2013-09-18 09:43:11 ----A---- C:\Windows\system32\secproc.dll
2013-09-18 09:43:11 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-09-18 09:43:11 ----A---- C:\Windows\system32\RMActivate.exe
2013-09-18 09:43:10 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-09-18 09:43:10 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-09-18 09:43:10 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-09-18 09:43:09 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-09-18 09:43:09 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-09-18 09:43:09 ----A---- C:\Windows\system32\schedsvc.dll
2013-09-18 09:43:09 ----A---- C:\Windows\system32\ole32.dll
2013-09-18 09:43:08 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-09-18 09:43:08 ----A---- C:\Windows\system32\taskschd.dll
2013-09-18 09:43:08 ----A---- C:\Windows\system32\spwizui.dll
2013-09-18 09:43:08 ----A---- C:\Windows\system32\RacEngn.dll
2013-09-18 09:43:07 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-09-18 09:43:07 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-09-18 09:43:07 ----A---- C:\Windows\system32\wevtsvc.dll
2013-09-18 09:43:07 ----A---- C:\Windows\system32\vssapi.dll
2013-09-18 09:43:07 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-09-18 09:43:07 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-09-18 09:43:07 ----A---- C:\Windows\system32\diagperf.dll
2013-09-18 09:43:06 ----A---- C:\Windows\system32\UIRibbon.dll
2013-09-18 09:43:06 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-09-18 09:43:06 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-09-18 09:43:05 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-09-18 09:43:05 ----A---- C:\Windows\system32\WsmSvc.dll
2013-09-18 09:43:05 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-09-18 09:43:04 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-09-18 09:43:04 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-09-18 09:43:04 ----A---- C:\Windows\system32\spreview.exe
2013-09-18 09:43:04 ----A---- C:\Windows\system32\spinstall.exe
2013-09-18 09:43:04 ----A---- C:\Windows\system32\rdpdd.dll
2013-09-18 09:43:04 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-09-18 09:43:04 ----A---- C:\Windows\system32\PresentationHost.exe
2013-09-18 09:43:04 ----A---- C:\Windows\system32\MPSSVC.dll
2013-09-18 09:43:04 ----A---- C:\Windows\system32\CertEnroll.dll
2013-09-18 09:43:03 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-09-18 09:43:03 ----A---- C:\Windows\system32\WinSAT.exe
2013-09-18 09:43:03 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-09-18 09:43:03 ----A---- C:\Windows\system32\d3d9.dll
2013-09-18 09:43:02 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-09-18 09:43:02 ----A---- C:\Windows\system32\VSSVC.exe
2013-09-18 09:43:02 ----A---- C:\Windows\system32\SearchFolder.dll
2013-09-18 09:43:02 ----A---- C:\Windows\system32\gpsvc.dll
2013-09-18 09:43:02 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-09-18 09:43:01 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-09-18 09:43:01 ----A---- C:\Windows\system32\dwmcore.dll
2013-09-18 09:43:01 ----A---- C:\Windows\system32\drivers\http.sys
2013-09-18 09:43:01 ----A---- C:\Windows\system32\dbgeng.dll
2013-09-18 09:43:00 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-09-18 09:43:00 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\termsrv.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\qmgr.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\gpprefcl.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\audiosrv.dll
2013-09-18 09:43:00 ----A---- C:\Windows\system32\actxprxy.dll
2013-09-18 09:42:59 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-09-18 09:42:59 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-09-18 09:42:59 ----A---- C:\Windows\system32\winhttp.dll
2013-09-18 09:42:59 ----A---- C:\Windows\system32\netlogon.dll
2013-09-18 09:42:59 ----A---- C:\Windows\system32\mstsc.exe
2013-09-18 09:42:59 ----A---- C:\Windows\system32\imapi2fs.dll
2013-09-18 09:42:58 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-09-18 09:42:58 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-09-18 09:42:58 ----A---- C:\Windows\system32\wbengine.exe
2013-09-18 09:42:58 ----A---- C:\Windows\system32\setupapi.dll
2013-09-18 09:42:58 ----A---- C:\Windows\system32\rpcss.dll
2013-09-18 09:42:58 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-09-18 09:42:58 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-09-18 09:42:58 ----A---- C:\Windows\system32\propsys.dll
2013-09-18 09:42:58 ----A---- C:\Windows\system32\msv1_0.dll
2013-09-18 09:42:57 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-09-18 09:42:57 ----A---- C:\Windows\system32\WSDApi.dll
2013-09-18 09:42:57 ----A---- C:\Windows\system32\werconcpl.dll
2013-09-18 09:42:57 ----A---- C:\Windows\system32\user32.dll
2013-09-18 09:42:57 ----A---- C:\Windows\system32\taskeng.exe
2013-09-18 09:42:57 ----A---- C:\Windows\system32\odbc32.dll
2013-09-18 09:42:56 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-09-18 09:42:56 ----A---- C:\Windows\system32\umrdp.dll
2013-09-18 09:42:56 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-09-18 09:42:56 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-09-18 09:42:56 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-09-18 09:42:56 ----A---- C:\Windows\system32\dhcpcore.dll
2013-09-18 09:42:56 ----A---- C:\Windows\system32\certmgr.dll
2013-09-18 09:42:55 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-09-18 09:42:54 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-09-18 09:42:54 ----A---- C:\Windows\system32\tsmf.dll
2013-09-18 09:42:54 ----A---- C:\Windows\system32\shlwapi.dll
2013-09-18 09:42:54 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-09-18 09:42:54 ----A---- C:\Windows\system32\msdrm.dll
2013-09-18 09:42:53 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-09-18 09:42:53 ----A---- C:\Windows\system32\rdpshell.exe
2013-09-18 09:42:53 ----A---- C:\Windows\system32\netshell.dll
2013-09-18 09:42:53 ----A---- C:\Windows\system32\msdtctm.dll
2013-09-18 09:42:53 ----A---- C:\Windows\system32\framedynos.dll
2013-09-18 09:42:52 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-09-18 09:42:52 ----A---- C:\Windows\system32\ws2_32.dll
2013-09-18 09:42:52 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-09-18 09:42:52 ----A---- C:\Windows\system32\winlogon.exe
2013-09-18 09:42:52 ----A---- C:\Windows\system32\netcfgx.dll
2013-09-18 09:42:52 ----A---- C:\Windows\system32\appmgr.dll
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-09-18 09:42:51 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\wpdshext.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\wmpps.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\Query.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\QAGENT.DLL
2013-09-18 09:42:51 ----A---- C:\Windows\system32\lsm.exe
2013-09-18 09:42:51 ----A---- C:\Windows\system32\drvstore.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\drivers\csc.sys
2013-09-18 09:42:51 ----A---- C:\Windows\system32\comdlg32.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\BFE.DLL
2013-09-18 09:42:51 ----A---- C:\Windows\system32\azroles.dll
2013-09-18 09:42:51 ----A---- C:\Windows\system32\apphelp.dll
2013-09-18 09:42:50 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-09-18 09:42:50 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-09-18 09:42:50 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-09-18 09:42:50 ----A---- C:\Windows\system32\Vault.dll
2013-09-18 09:42:50 ----A---- C:\Windows\system32\samsrv.dll
2013-09-18 09:42:50 ----A---- C:\Windows\system32\lpksetup.exe
2013-09-18 09:42:50 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-09-18 09:42:50 ----A---- C:\Windows\system32\cmd.exe
2013-09-18 09:42:49 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-09-18 09:42:49 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-09-18 09:42:49 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-09-18 09:42:49 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-09-18 09:42:49 ----A---- C:\Windows\system32\Wldap32.dll
2013-09-18 09:42:49 ----A---- C:\Windows\system32\sxs.dll
2013-09-18 09:42:49 ----A---- C:\Windows\system32\rdpclip.exe
2013-09-18 09:42:49 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-09-18 09:42:49 ----A---- C:\Windows\system32\cscsvc.dll
2013-09-18 09:42:49 ----A---- C:\Windows\system32\cscobj.dll
2013-09-18 09:42:48 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-09-18 09:42:48 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-09-18 09:42:48 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-09-18 09:42:48 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-09-18 09:42:48 ----A---- C:\Windows\system32\taskcomp.dll
2013-09-18 09:42:48 ----A---- C:\Windows\system32\pnidui.dll
2013-09-18 09:42:48 ----A---- C:\Windows\system32\mfds.dll
2013-09-18 09:42:48 ----A---- C:\Windows\system32\mcbuilder.exe
2013-09-18 09:42:48 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-09-18 09:42:48 ----A---- C:\Windows\system32\hgprint.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-09-18 09:42:47 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\winsta.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\webservices.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\SessEnv.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\rdpendp.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\fveapi.dll
2013-09-18 09:42:47 ----A---- C:\Windows\system32\dot3api.dll
2013-09-18 09:42:46 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-09-18 09:42:46 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\wlanpref.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\schtasks.exe
2013-09-18 09:42:46 ----A---- C:\Windows\system32\prncache.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\mcmde.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\gdi32.dll
2013-09-18 09:42:46 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-09-18 09:42:46 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-09-18 09:42:45 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-09-18 09:42:45 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-09-18 09:42:45 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-09-18 09:42:45 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\wmpmde.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\vpnike.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\userenv.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\tspubwmi.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\photowiz.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-09-18 09:42:45 ----A---- C:\Windows\system32\FXSSVC.exe
2013-09-18 09:42:45 ----A---- C:\Windows\system32\framedyn.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\evr.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-09-18 09:42:45 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-09-18 09:42:45 ----A---- C:\Windows\system32\AudioSes.dll
2013-09-18 09:42:45 ----A---- C:\Windows\system32\aepdu.dll
2013-09-18 09:42:44 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-09-18 09:42:44 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\wmpeffects.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\SyncCenter.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\srvsvc.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\sppobjs.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\shsvcs.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\rdpinit.exe
2013-09-18 09:42:44 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-09-18 09:42:44 ----A---- C:\Windows\system32\aeinv.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-09-18 09:42:43 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\vmicsvc.exe
2013-09-18 09:42:43 ----A---- C:\Windows\system32\stobject.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\netdiagfx.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\localsec.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\imapi2.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\fde.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-09-18 09:42:43 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-09-18 09:42:43 ----A---- C:\Windows\system32\credui.dll
2013-09-18 09:42:43 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-09-18 09:42:42 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-09-18 09:42:42 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-09-18 09:42:42 ----A---- C:\Windows\system32\spp.dll
2013-09-18 09:42:42 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-09-18 09:42:42 ----A---- C:\Windows\system32\netid.dll
2013-09-18 09:42:42 ----A---- C:\Windows\system32\inetpp.dll
2013-09-18 09:42:42 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-09-18 09:42:41 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\scansetting.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\printui.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\pla.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\mspbda.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\msinfo32.exe
2013-09-18 09:42:41 ----A---- C:\Windows\system32\cscui.dll
2013-09-18 09:42:41 ----A---- C:\Windows\system32\biocpl.dll
2013-09-18 09:42:40 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-09-18 09:42:40 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-09-18 09:42:40 ----A---- C:\Windows\system32\wusa.exe
2013-09-18 09:42:40 ----A---- C:\Windows\system32\wiaservc.dll
2013-09-18 09:42:40 ----A---- C:\Windows\system32\vds.exe
2013-09-18 09:42:40 ----A---- C:\Windows\system32\rpchttp.dll
2013-09-18 09:42:40 ----A---- C:\Windows\system32\msdri.dll
2013-09-18 09:42:40 ----A---- C:\Windows\system32\mscms.dll
2013-09-18 09:42:40 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-09-18 09:42:40 ----A---- C:\Windows\system32\drivers\pci.sys
2013-09-18 09:42:40 ----A---- C:\Windows\system32\aitagent.exe
2013-09-18 09:42:40 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-09-18 09:42:39 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-09-18 09:42:39 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-09-18 09:42:39 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-09-18 09:42:39 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-09-18 09:42:39 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-09-18 09:42:39 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-09-18 09:42:39 ----A---- C:\Windows\system32\wisptis.exe
2013-09-18 09:42:39 ----A---- C:\Windows\system32\sppwinob.dll
2013-09-18 09:42:39 ----A---- C:\Windows\system32\PkgMgr.exe
2013-09-18 09:42:39 ----A---- C:\Windows\system32\ocsetup.exe
2013-09-18 09:42:39 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-09-18 09:42:39 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-09-18 09:42:38 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-09-18 09:42:38 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-09-18 09:42:38 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\wcncsvc.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\upnp.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\ocsetapi.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\mprapi.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\eapphost.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\eapp3hst.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\DXP.dll
2013-09-18 09:42:38 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-09-18 09:42:38 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-09-18 09:42:38 ----A---- C:\Windows\system32\ci.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-09-18 09:42:37 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\thumbcache.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\t2embed.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\scecli.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\Robocopy.exe
2013-09-18 09:42:37 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-09-18 09:42:37 ----A---- C:\Windows\system32\hal.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\dwmredir.dll
2013-09-18 09:42:37 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-09-18 09:42:36 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-09-18 09:42:36 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\themeui.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\scrptadm.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\puiobj.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\onex.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\msasn1.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\iasrad.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-09-18 09:42:36 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-09-18 09:42:36 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-09-18 09:42:35 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-09-18 09:42:35 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-09-18 09:42:35 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-09-18 09:42:35 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-09-18 09:42:35 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-09-18 09:42:35 ----A---- C:\Windows\system32\wlangpui.dll
2013-09-18 09:42:35 ----A---- C:\Windows\system32\wdc.dll
2013-09-18 09:42:35 ----A---- C:\Windows\system32\scesrv.dll
2013-09-18 09:42:35 ----A---- C:\Windows\system32\rasmans.dll
2013-09-18 09:42:34 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\wscapi.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\wiadefui.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\VAN.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\SndVol.exe
2013-09-18 09:42:34 ----A---- C:\Windows\system32\sdengin2.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\samcli.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\netcenter.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\msftedit.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\dskquoui.dll
2013-09-18 09:42:34 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-09-18 09:42:33 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\wksprt.exe
2013-09-18 09:42:33 ----A---- C:\Windows\system32\TabSvc.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\srchadmin.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\setupcl.exe
2013-09-18 09:42:33 ----A---- C:\Windows\system32\regapi.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\rastls.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\QUTIL.DLL
2013-09-18 09:42:33 ----A---- C:\Windows\system32\iasacct.dll
2013-09-18 09:42:33 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-09-18 09:42:33 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-09-18 09:42:32 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-09-18 09:42:32 ----A---- C:\Windows\SYSWOW64\wscapi.dll

[melondubnica]

pokracovanie logu:
------


2013-09-18 09:42:32 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-09-18 09:42:32 ----A---- C:\Windows\system32\tapisrv.dll
2013-09-18 09:42:32 ----A---- C:\Windows\system32\netiohlp.dll
2013-09-18 09:42:32 ----A---- C:\Windows\system32\mimefilt.dll
2013-09-18 09:42:32 ----A---- C:\Windows\system32\ListSvc.dll
2013-09-18 09:42:32 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-09-18 09:42:32 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-09-18 09:42:31 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-09-18 09:42:31 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-09-18 09:42:31 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-09-18 09:42:31 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-09-18 09:42:31 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\mtxclu.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\msconfig.exe
2013-09-18 09:42:31 ----A---- C:\Windows\system32\lsmproxy.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\hgcpl.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\fdeploy.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-09-18 09:42:31 ----A---- C:\Windows\system32\drivers\ks.sys
2013-09-18 09:42:31 ----A---- C:\Windows\system32\clusapi.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\basecsp.dll
2013-09-18 09:42:31 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-09-18 09:42:30 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-09-18 09:42:30 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-09-18 09:42:30 ----A---- C:\Windows\system32\riched20.dll
2013-09-18 09:42:30 ----A---- C:\Windows\system32\dnscmmc.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-09-18 09:42:29 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-09-18 09:42:29 ----A---- C:\Windows\system32\wkssvc.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\themecpl.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\powercpl.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\netjoin.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\nci.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\Narrator.exe
2013-09-18 09:42:29 ----A---- C:\Windows\system32\logoncli.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\Faultrep.dll
2013-09-18 09:42:29 ----A---- C:\Windows\system32\eudcedit.exe
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-09-18 09:42:28 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-09-18 09:42:28 ----A---- C:\Windows\system32\sppcomapi.dll
2013-09-18 09:42:28 ----A---- C:\Windows\system32\cabview.dll
2013-09-18 09:42:28 ----A---- C:\Windows\system32\autochk.exe
2013-09-18 09:42:28 ----A---- C:\Windows\system32\autofmt.exe
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-09-18 09:42:27 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\wwanconn.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\wpd_ci.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\wlanui.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\SmiEngine.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\shsetup.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\sdclt.exe
2013-09-18 09:42:27 ----A---- C:\Windows\system32\prntvpt.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\nshipsec.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\mscorier.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\fms.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\drivers\winusb.sys
2013-09-18 09:42:27 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-09-18 09:42:27 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-09-18 09:42:27 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-09-18 09:42:27 ----A---- C:\Windows\system32\dps.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\bcdsrv.dll
2013-09-18 09:42:27 ----A---- C:\Windows\system32\autoconv.exe
2013-09-18 09:42:27 ----A---- C:\Windows\system32\audiodg.exe
2013-09-18 09:42:26 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-09-18 09:42:26 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-09-18 09:42:26 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-09-18 09:42:26 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-09-18 09:42:26 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\rdpsign.exe
2013-09-18 09:42:26 ----A---- C:\Windows\system32\mprddm.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\mblctr.exe
2013-09-18 09:42:26 ----A---- C:\Windows\system32\fontext.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\Display.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\credssp.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\batmeter.dll
2013-09-18 09:42:26 ----A---- C:\Windows\system32\AxInstSv.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-09-18 09:42:25 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\usercpl.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\rtutils.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\provsvc.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\DiagCpl.dll
2013-09-18 09:42:25 ----A---- C:\Windows\system32\bootres.dll
2013-09-18 09:42:24 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-09-18 09:42:24 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-09-18 09:42:24 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-09-18 09:42:24 ----A---- C:\Windows\system32\wpccpl.dll
2013-09-18 09:42:24 ----A---- C:\Windows\system32\sppsvc.exe
2013-09-18 09:42:24 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-09-18 09:42:24 ----A---- C:\Windows\system32\rasppp.dll
2013-09-18 09:42:24 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-09-18 09:42:24 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-09-18 09:42:24 ----A---- C:\Windows\system32\dot3cfg.dll
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-09-18 09:42:23 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-09-18 09:42:23 ----A---- C:\Windows\system32\taskmgr.exe
2013-09-18 09:42:23 ----A---- C:\Windows\system32\prnfldr.dll
2013-09-18 09:42:23 ----A---- C:\Windows\system32\pdh.dll
2013-09-18 09:42:23 ----A---- C:\Windows\system32\hbaapi.dll
2013-09-18 09:42:23 ----A---- C:\Windows\system32\dxdiagn.dll
2013-09-18 09:42:23 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-09-18 09:42:22 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-09-18 09:42:22 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-09-18 09:42:22 ----A---- C:\Windows\system32\userinit.exe
2013-09-18 09:42:22 ----A---- C:\Windows\system32\untfs.dll
2013-09-18 09:42:22 ----A---- C:\Windows\system32\proquota.exe
2013-09-18 09:42:22 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-09-18 09:42:22 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-09-18 09:42:22 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-09-18 09:42:21 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-09-18 09:42:21 ----A---- C:\Windows\system32\zipfldr.dll
2013-09-18 09:42:21 ----A---- C:\Windows\system32\sud.dll
2013-09-18 09:42:21 ----A---- C:\Windows\system32\slui.exe
2013-09-18 09:42:21 ----A---- C:\Windows\system32\msieftp.dll
2013-09-18 09:42:21 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-09-18 09:42:21 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-09-18 09:42:20 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\networkmap.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\dot3svc.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\cryptui.dll
2013-09-18 09:42:20 ----A---- C:\Windows\system32\ActionCenter.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-09-18 09:42:19 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\uxlib.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\twext.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\sisbkup.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\recovery.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\OobeFldr.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\isoburn.exe
2013-09-18 09:42:19 ----A---- C:\Windows\system32\dsuiext.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-09-18 09:42:19 ----A---- C:\Windows\system32\cca.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\bcdedit.exe
2013-09-18 09:42:19 ----A---- C:\Windows\system32\azroleui.dll
2013-09-18 09:42:19 ----A---- C:\Windows\system32\asycfilt.dll
2013-09-18 09:42:18 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-09-18 09:42:18 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-09-18 09:42:18 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-09-18 09:42:18 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-09-18 09:42:18 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\tzutil.exe
2013-09-18 09:42:18 ----A---- C:\Windows\system32\systemcpl.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\syncui.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\shwebsvc.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\sdcpl.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\recdisc.exe
2013-09-18 09:42:18 ----A---- C:\Windows\system32\netplwiz.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\httpapi.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\fvecpl.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\efscore.dll
2013-09-18 09:42:18 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-09-18 09:42:18 ----A---- C:\Windows\system32\autoplay.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-09-18 09:42:17 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\wlanmsm.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\vdsutil.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\sysclass.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\spwizeng.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\sdrsvc.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\ncryptui.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\msvidc32.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\MFPlay.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-09-18 09:42:17 ----A---- C:\Windows\system32\certcli.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-09-18 09:42:17 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-09-18 09:42:16 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-09-18 09:42:16 ----A---- C:\Windows\system32\termmgr.dll
2013-09-18 09:42:16 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-09-18 09:42:16 ----A---- C:\Windows\system32\sethc.exe
2013-09-18 09:42:16 ----A---- C:\Windows\system32\ReAgent.dll
2013-09-18 09:42:16 ----A---- C:\Windows\system32\ntlanman.dll
2013-09-18 09:42:16 ----A---- C:\Windows\system32\msscp.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-09-18 09:42:15 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\srvcli.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\sqlcese30.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\slwga.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\rdpd3d.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\iyuv_32.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\iTVData.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-09-18 09:42:15 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-09-18 09:42:15 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-09-18 09:42:14 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-09-18 09:42:14 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-09-18 09:42:13 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\wavemsp.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\TSpkg.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\srrstr.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\sppnp.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\ntprint.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\nslookup.exe
2013-09-18 09:42:13 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-09-18 09:42:13 ----A---- C:\Windows\system32\msiexec.exe
2013-09-18 09:42:13 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\certprop.dll
2013-09-18 09:42:13 ----A---- C:\Windows\system32\bcdboot.exe
2013-09-18 09:42:13 ----A---- C:\Windows\system32\acppage.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-09-18 09:42:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\wmpdxm.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\wkscli.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\WinSCard.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\remotepg.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-09-18 09:42:12 ----A---- C:\Windows\system32\networkexplorer.dll
2013-09-18 09:42:12 ----A---- C:\Windows\system32\ftp.exe
2013-09-18 09:42:12 ----A---- C:\Windows\system32\dfrgui.exe
2013-09-18 09:42:12 ----A---- C:\Windows\system32\cabinet.dll
2013-09-18 09:42:11 ----A---- C:\Windows\twain_32.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-09-18 09:42:11 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\wvc.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\wsqmcons.exe
2013-09-18 09:42:11 ----A---- C:\Windows\system32\wsnmp32.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-09-18 09:42:11 ----A---- C:\Windows\system32\unimdmat.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-09-18 09:42:11 ----A---- C:\Windows\system32\OpcServices.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\net1.exe
2013-09-18 09:42:11 ----A---- C:\Windows\system32\msyuv.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\msrle32.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\mfps.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\mapistub.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\mapi32.dll
2013-09-18 09:42:11 ----A---- C:\Windows\system32\blackbox.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-09-18 09:42:10 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-09-18 09:42:10 ----A---- C:\Windows\system32\tsbyuv.dll
2013-09-18 09:42:10 ----A---- C:\Windows\system32\seclogon.dll
2013-09-18 09:42:10 ----A---- C:\Windows\system32\iscsium.dll
2013-09-18 09:42:10 ----A---- C:\Windows\system32\ifsutil.dll
2013-09-18 09:42:10 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-09-18 09:42:10 ----A---- C:\Windows\system32\diskraid.exe
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\input.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-09-18 09:42:09 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\wpdwcn.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\wmpshell.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-09-18 09:42:09 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-09-18 09:42:09 ----A---- C:\Windows\system32\wiavideo.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\umb.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\tlscsp.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\syssetup.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\runonce.exe
2013-09-18 09:42:09 ----A---- C:\Windows\system32\rdpencom.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\raschap.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\qasf.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\perfmon.exe
2013-09-18 09:42:09 ----A---- C:\Windows\system32\netutils.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-09-18 09:42:09 ----A---- C:\Windows\system32\muifontsetup.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\FXSAPI.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\dbghelp.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-09-18 09:42:09 ----A---- C:\Windows\system32\ActionQueue.dll
2013-09-18 09:42:09 ----A---- C:\Windows\bfsvc.exe
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-09-18 09:42:08 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-09-18 09:42:08 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-09-18 09:42:08 ----A---- C:\Windows\system32\vdsbas.dll
2013-09-18 09:42:08 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-09-18 09:42:08 ----A---- C:\Windows\system32\mstask.dll
2013-09-18 09:42:08 ----A---- C:\Windows\system32\MdSched.exe
2013-09-18 09:42:08 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-09-18 09:42:07 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-09-18 09:42:07 ----A---- C:\Windows\system32\WPDSp.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-09-18 09:42:07 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\vss_ps.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\tabcal.exe
2013-09-18 09:42:07 ----A---- C:\Windows\system32\shacct.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-09-18 09:42:07 ----A---- C:\Windows\system32\qcap.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\nltest.exe
2013-09-18 09:42:07 ----A---- C:\Windows\system32\msnetobj.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\logman.exe
2013-09-18 09:42:07 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-09-18 09:42:07 ----A---- C:\Windows\system32\CscMig.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\cscapi.dll
2013-09-18 09:42:07 ----A---- C:\Windows\system32\bitsadmin.exe
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-09-18 09:42:06 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\takeown.exe
2013-09-18 09:42:06 ----A---- C:\Windows\system32\spbcd.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\qdv.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-09-18 09:42:06 ----A---- C:\Windows\system32\fphc.dll
2013-09-18 09:42:06 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-09-18 09:42:06 ----A---- C:\Windows\system32\dot3ui.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-09-18 09:42:05 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\WavDest.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\shimgvw.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-09-18 09:42:05 ----A---- C:\Windows\system32\nrpsrv.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\iasrecst.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\djoin.exe
2013-09-18 09:42:05 ----A---- C:\Windows\system32\cmstp.exe
2013-09-18 09:42:05 ----A---- C:\Windows\system32\CertPolEng.dll
2013-09-18 09:42:05 ----A---- C:\Windows\system32\amstream.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-09-18 09:42:04 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\sscore.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\relog.exe
2013-09-18 09:42:04 ----A---- C:\Windows\system32\mydocs.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-09-18 09:42:04 ----A---- C:\Windows\system32\msdmo.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\mobsync.exe
2013-09-18 09:42:04 ----A---- C:\Windows\system32\KMSVC.DLL
2013-09-18 09:42:04 ----A---- C:\Windows\system32\itircl.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\iscsicli.exe
2013-09-18 09:42:04 ----A---- C:\Windows\system32\fdProxy.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-09-18 09:42:04 ----A---- C:\Windows\system32\diskpart.exe
2013-09-18 09:42:04 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-09-18 09:42:04 ----A---- C:\Windows\system32\BdeHdCfg.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-09-18 09:42:03 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\sppc.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\schedcli.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\qprocess.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\onexui.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\mciqtz32.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\manage-bde.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\luainstall.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\choice.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\chglogon.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\findstr.exe
2013-09-18 09:42:03 ----A---- C:\Windows\system32\eappgnui.dll
2013-09-18 09:42:03 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-09-18 09:42:03 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-09-18 09:42:03 ----A---- C:\Windows\system32\dot3msm.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-09-18 09:42:02 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\vmicres.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\tskill.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\tsdiscon.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\tscon.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\spopk.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\rwinsta.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\repair-bde.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\qappsrv.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\odbcconf.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\logoff.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\inetmib1.dll
2013-09-18 09:42:02 ----A---- C:\Windows\system32\chgusr.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\chgport.exe
2013-09-18 09:42:02 ----A---- C:\Windows\system32\fixmapi.exe
2013-09-18 09:42:01 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-09-18 09:42:01 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-09-18 09:42:01 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-09-18 09:42:01 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-09-18 09:42:01 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\wshbth.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\vmbusres.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\TRAPI.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\shadow.exe
2013-09-18 09:42:01 ----A---- C:\Windows\system32\reset.exe
2013-09-18 09:42:01 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\query.exe
2013-09-18 09:42:01 ----A---- C:\Windows\system32\napdsnap.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\LogonUI.exe
2013-09-18 09:42:01 ----A---- C:\Windows\system32\change.exe
2013-09-18 09:42:01 ----A---- C:\Windows\system32\FXSMON.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\elsTrans.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\dsauth.dll
2013-09-18 09:42:01 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-09-18 09:42:00 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-09-18 09:42:00 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-09-18 09:42:00 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-09-18 09:42:00 ----A---- C:\Windows\system32\cscdll.dll
2013-09-18 09:42:00 ----A---- C:\Windows\system32\bitsperf.dll
2013-09-18 09:41:59 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-09-18 09:41:58 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-09-18 09:41:58 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-09-18 09:41:58 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-09-18 09:41:58 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-09-18 09:41:58 ----A---- C:\Windows\system32\wshirda.dll
2013-09-18 09:41:58 ----A---- C:\Windows\system32\wsdchngr.dll
2013-09-18 09:41:58 ----A---- C:\Windows\system32\shgina.dll
2013-09-18 09:41:58 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-09-18 09:41:58 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-09-18 09:41:57 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-09-18 09:41:57 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-09-18 09:41:57 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-09-18 09:41:57 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\spwmp.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\riched32.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\drivers\appid.sys
2013-09-18 09:41:57 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-09-18 09:41:57 ----A---- C:\Windows\system32\browseui.dll
2013-09-18 09:41:56 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\wmploc.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\spwizres.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\shunimpl.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\pifmgr.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\nlsbres.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDUS.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDSG.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDSF.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDPO.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDMON.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-09-18 09:41:56 ----A---- C:\Windows\system32\dxmasf.dll
2013-09-18 09:41:56 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-09-18 09:41:56 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-09-18 09:41:56 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-09-18 09:41:56 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-09-18 09:41:56 ----A---- C:\Windows\system32\BlbEvents.dll
2013-09-18 09:41:55 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-09-18 09:41:52 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-09-18 09:41:52 ----A---- C:\Windows\system32\dpx.dll
2013-09-18 09:41:49 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-09-18 09:41:32 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-09-18 09:40:03 ----A---- C:\Windows\system32\wbemcomn.dll
2013-09-18 09:40:01 ----A---- C:\Windows\system32\sqmapi.dll
2013-09-18 09:25:58 ----A---- C:\Windows\system32\esent.dll
2013-09-18 09:25:57 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-09-18 09:25:57 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-09-18 09:25:57 ----A---- C:\Windows\system32\fsutil.exe
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\storport.sys
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-09-18 09:25:57 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-09-18 09:25:48 ----A---- C:\Windows\system32\fsquirt.exe
2013-09-18 09:25:48 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-09-18 09:25:48 ----A---- C:\Windows\system32\drivers\bthport.sys

======List of files/folders modified in the last 1 months======

2013-10-12 12:13:52 ----D---- C:\Windows\Prefetch
2013-10-12 12:13:46 ----D---- C:\Windows\Temp
2013-10-12 12:13:45 ----RD---- C:\Program Files
2013-10-12 12:02:16 ----D---- C:\Windows\system32\config
2013-10-12 11:38:12 ----D---- C:\Users\gabo\AppData\Roaming\Skype
2013-10-12 10:41:14 ----D---- C:\Windows\System32
2013-10-12 10:41:14 ----D---- C:\Windows\inf
2013-10-12 10:41:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-10-12 10:37:47 ----SHD---- C:\System Volume Information
2013-10-11 06:48:04 ----SHD---- C:\Windows\Installer
2013-10-11 06:47:37 ----D---- C:\Program Files (x86)\Nokia
2013-10-11 06:47:37 ----D---- C:\Program Files (x86)\Common Files
2013-10-09 21:46:11 ----D---- C:\Windows\system32\Tasks
2013-10-09 21:46:09 ----D---- C:\Windows\Tasks
2013-10-09 21:46:09 ----D---- C:\Program Files (x86)\Google
2013-10-09 21:45:08 ----AD---- C:\ProgramData\Temp
2013-10-09 21:44:38 ----RD---- C:\Program Files (x86)
2013-10-09 20:56:48 ----D---- C:\Windows\SysWOW64
2013-10-09 20:49:30 ----D---- C:\Windows\system32\catroot2
2013-10-09 20:44:09 ----HD---- C:\ProgramData
2013-10-09 07:06:15 ----D---- C:\Windows\rescache
2013-10-09 06:23:51 ----RSD---- C:\Windows\assembly
2013-10-09 06:23:51 ----D---- C:\Windows\Microsoft.NET
2013-10-09 05:59:31 ----D---- C:\Windows\winsxs
2013-10-09 05:57:03 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-09 05:57:02 ----D---- C:\Windows\system32\drivers
2013-10-09 05:57:02 ----D---- C:\Program Files\Internet Explorer
2013-10-09 05:57:00 ----D---- C:\Windows\system32\en-US
2013-10-09 05:57:00 ----D---- C:\Windows\AppPatch
2013-10-09 05:56:58 ----D---- C:\Windows\system32\DriverStore
2013-10-09 05:55:03 ----D---- C:\Windows\system32\catroot
2013-10-09 05:48:43 ----D---- C:\Windows\system32\MRT
2013-10-09 05:48:39 ----A---- C:\Windows\system32\MRT.exe
2013-10-08 04:18:46 ----D---- C:\Windows\twain_32
2013-10-06 07:07:24 ----D---- C:\Users\gabo\AppData\Roaming\vlc
2013-10-03 21:38:50 ----D---- C:\Program Files (x86)\VideoLAN
2013-09-29 07:20:23 ----D---- C:\Users\gabo\AppData\Roaming\dvdcss
2013-09-27 20:07:57 ----D---- C:\Users\gabo\AppData\Roaming\XnView
2013-09-27 18:47:21 ----D---- C:\Windows\system32\drivers\UMDF
2013-09-27 18:47:19 ----D---- C:\ProgramData\PC Suite
2013-09-21 06:04:35 ----D---- C:\Windows\SYSWOW64\en-US
2013-09-21 06:04:34 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-09-21 06:04:33 ----D---- C:\Windows\system32\sk-SK
2013-09-21 06:04:32 ----D---- C:\Program Files\Windows Defender
2013-09-21 06:04:32 ----D---- C:\Program Files (x86)\Windows Defender
2013-09-21 06:04:28 ----D---- C:\Windows\SYSWOW64\migration
2013-09-21 06:04:23 ----D---- C:\Windows\system32\migration
2013-09-21 06:04:23 ----D---- C:\Windows\PolicyDefinitions
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\it-IT
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\es-ES
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\el-GR
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\de-DE
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\da-DK
2013-09-21 06:04:19 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-09-21 06:04:18 ----D---- C:\Windows\system32\zh-TW
2013-09-21 06:04:18 ----D---- C:\Windows\system32\zh-HK
2013-09-21 06:04:18 ----D---- C:\Windows\system32\zh-CN
2013-09-21 06:04:18 ----D---- C:\Windows\system32\tr-TR
2013-09-21 06:04:18 ----D---- C:\Windows\system32\sv-SE
2013-09-21 06:04:18 ----D---- C:\Windows\system32\ru-RU
2013-09-21 06:04:18 ----D---- C:\Windows\system32\pt-PT
2013-09-21 06:04:18 ----D---- C:\Windows\system32\pt-BR
2013-09-21 06:04:18 ----D---- C:\Windows\system32\pl-PL
2013-09-21 06:04:18 ----D---- C:\Windows\system32\nl-NL
2013-09-21 06:04:18 ----D---- C:\Windows\system32\nb-NO
2013-09-21 06:04:18 ----D---- C:\Windows\system32\ko-KR
2013-09-21 06:04:18 ----D---- C:\Windows\system32\ja-JP
2013-09-21 06:04:18 ----D---- C:\Windows\system32\it-IT
2013-09-21 06:04:18 ----D---- C:\Windows\system32\hu-HU
2013-09-21 06:04:18 ----D---- C:\Windows\system32\fr-FR
2013-09-21 06:04:18 ----D---- C:\Windows\system32\fi-FI
2013-09-21 06:04:18 ----D---- C:\Windows\system32\es-ES
2013-09-21 06:04:18 ----D---- C:\Windows\system32\el-GR
2013-09-21 06:04:18 ----D---- C:\Windows\system32\de-DE
2013-09-21 06:04:18 ----D---- C:\Windows\system32\da-DK
2013-09-21 06:04:18 ----D---- C:\Windows\system32\cs-CZ
2013-09-21 06:04:12 ----D---- C:\Program Files\Windows Journal
2013-09-21 05:55:32 ----D---- C:\Windows\Logs
2013-09-21 05:50:04 ----D---- C:\Windows
2013-09-20 17:49:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-09-18 10:25:03 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-09-18 10:25:03 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-09-18 10:25:03 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-09-18 10:25:03 ----D---- C:\Program Files (x86)\Windows Media Player
2013-09-18 10:25:03 ----D---- C:\Program Files (x86)\Windows Mail
2013-09-18 10:25:02 ----D---- C:\Program Files\Windows Sidebar
2013-09-18 10:25:02 ----D---- C:\Program Files\Windows Mail
2013-09-18 10:25:02 ----D---- C:\Program Files\DVD Maker
2013-09-18 10:25:01 ----D---- C:\Program Files\Windows Portable Devices
2013-09-18 10:24:58 ----D---- C:\Program Files\Windows Media Player
2013-09-18 10:24:57 ----D---- C:\Program Files\Windows Photo Viewer
2013-09-18 10:24:56 ----D---- C:\Program Files\Common Files\System
2013-09-18 10:24:55 ----D---- C:\Windows\servicing
2013-09-18 10:24:55 ----D---- C:\Windows\ehome
2013-09-18 10:24:52 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\sppui
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\Setup
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\oobe
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\en
2013-09-18 10:24:48 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-09-18 10:24:47 ----D---- C:\Windows\SYSWOW64\wbem
2013-09-18 10:24:47 ----D---- C:\Windows\SYSWOW64\migwiz
2013-09-18 10:24:47 ----D---- C:\Windows\SYSWOW64\Dism
2013-09-18 10:24:36 ----D---- C:\Windows\system32\sppui
2013-09-18 10:24:36 ----D---- C:\Windows\system32\Setup
2013-09-18 10:24:36 ----D---- C:\Windows\system32\oobe
2013-09-18 10:24:36 ----D---- C:\Windows\system32\manifeststore
2013-09-18 10:24:36 ----D---- C:\Windows\system32\AdvancedInstallers
2013-09-18 10:24:35 ----D---- C:\Windows\system32\wbem
2013-09-18 10:24:35 ----D---- C:\Windows\system32\migwiz
2013-09-18 10:24:35 ----D---- C:\Windows\system32\drivers\en-US
2013-09-18 10:24:35 ----D---- C:\Windows\system32\Dism
2013-09-18 10:24:21 ----RSD---- C:\Windows\Fonts
2013-09-18 10:24:11 ----D---- C:\Windows\system32\Boot
2013-09-18 10:24:01 ----D---- C:\Windows\system32\wdi
2013-09-18 10:21:36 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-09-18 10:21:35 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-29 568600]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-05-21 19264]
R0 LHDmgr;LHDmgr; C:\Windows\System32\DRIVERS\LhdX64.sys [2013-08-22 39008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-08 30056]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [2013-05-20 493656]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [2013-05-22 1139800]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [2013-09-24 1525848]
R1 ccSet_NIS;Norton Internet Security Settings Manager; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [2013-04-15 169048]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-09-01 484952]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20131011.001\IDSvia64.sys [2013-10-09 520280]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [2013-03-04 36952]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [2013-03-04 224416]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [2013-04-24 433752]
R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2013-08-22 30816]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-12-05 195584]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2012-04-28 36480]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-05-31 2811904]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2012-04-28 341120]
R3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2012-04-28 111232]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2012-04-28 30848]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2012-04-28 168064]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2012-04-28 68736]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2012-04-28 281472]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2012-04-28 550528]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthMtpEnum;Bluetooth MTP Device Enumerator; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-09-01 140376]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-05-21 357184]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-05-21 789824]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-11-15 111216]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131011.023\ENG64.SYS [2013-09-01 126040]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131011.023\EX64.SYS [2013-09-01 2099288]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [2013-05-15 796760]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-09-02 177312]
R3 vm332avs;Lenovo Camera2; C:\Windows\System32\Drivers\vm332avs.sys [2012-02-06 958800]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2011-12-05 195584]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2011-11-15 313960]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-12-05 659968]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-04-28 119424]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-12-05 135952]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [2013-05-20 144368]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-08 1258856]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-07-02 93072]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-07-25 162672]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-09-11 118680]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-23 1255736]

-----------------EOF-----------------

[Márty84]

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

[melondubnica]

Dobry den, uvodom dakujem za pomoc a prikladam vysledky z OTL v rozdelenych spravach.

OTL logfile created on: 18. 10. 2013 13:38:02 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\gabo\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

3,90 Gb Total Physical Memory | 2,31 Gb Available Physical Memory | 59,20% Memory free
7,81 Gb Paging File | 6,08 Gb Available in Paging File | 77,84% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,56 Gb Total Space | 54,10 Gb Free Space | 55,45% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 344,10 Gb Free Space | 93,48% Space Free | Partition Type: NTFS

Computer Name: GABO-PC | User Name: gabo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/10/18 13:33:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\gabo\Desktop\OTL.exe
PRC - [2013/10/08 14:28:15 | 000,275,696 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\nis.exe
PRC - [2013/10/02 20:28:54 | 001,090,912 | ---- | M] (Nokia) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
PRC - [2013/09/11 04:26:32 | 000,274,840 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2013/07/02 11:19:30 | 000,248,208 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2013/07/02 11:19:30 | 000,093,072 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/18 11:06:42 | 000,737,616 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
PRC - [2013/04/18 11:06:24 | 000,158,032 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
PRC - [2012/10/08 11:42:54 | 001,258,856 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/05/21 15:26:28 | 000,291,648 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2012/04/28 10:20:06 | 000,163,456 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
PRC - [2011/12/09 15:45:00 | 000,548,864 | ---- | M] (Vimicro) -- C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
PRC - [2011/11/29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011/11/29 20:04:54 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2011/08/17 17:52:06 | 002,143,104 | ---- | M] (TeamViewer GmbH) -- c:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Desktop.exe
PRC - [2011/08/17 17:52:05 | 008,090,496 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
PRC - [2011/08/17 17:52:05 | 002,358,656 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011/08/17 17:07:10 | 000,108,416 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\tv_w32.exe
PRC - [2007/12/13 19:10:56 | 001,688,872 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe


========== Modules (No Company Name) ==========

MOD - [2013/10/09 06:12:30 | 011,914,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll
MOD - [2013/10/09 06:12:25 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll
MOD - [2013/10/09 06:12:24 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4eef5a3a4d0ed6d6fd882947a70df530\WindowsBase.ni.dll
MOD - [2013/10/09 06:12:24 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\6e3778958a8bfd03bf0f2f60c4e25623\IAStorCommon.ni.dll
MOD - [2013/10/09 06:12:22 | 000,487,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\d4493b0e5a5c6faf89cfeaa5f2a21034\IAStorUtil.ni.dll
MOD - [2013/10/09 06:12:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll
MOD - [2013/10/09 06:12:16 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
MOD - [2013/10/09 06:11:48 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
MOD - [2013/10/09 06:11:45 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll
MOD - [2013/10/09 06:11:44 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
MOD - [2013/10/09 06:11:39 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2013/10/02 20:30:00 | 000,276,832 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
MOD - [2013/10/02 20:30:00 | 000,093,024 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll
MOD - [2013/10/02 20:29:42 | 002,653,024 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
MOD - [2013/10/02 20:29:42 | 000,364,384 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
MOD - [2013/10/02 20:29:40 | 011,166,560 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
MOD - [2013/10/02 20:29:38 | 000,206,176 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
MOD - [2013/10/02 20:29:36 | 001,346,912 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
MOD - [2013/10/02 20:29:36 | 000,720,736 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
MOD - [2013/10/02 20:29:34 | 001,014,624 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
MOD - [2013/10/02 20:29:34 | 000,520,544 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
MOD - [2013/10/02 20:29:32 | 008,507,232 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
MOD - [2013/10/02 20:29:32 | 002,480,992 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
MOD - [2013/10/02 20:29:30 | 002,354,016 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
MOD - [2013/10/02 20:29:28 | 000,446,304 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
MOD - [2013/10/02 20:29:22 | 000,207,200 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qjpeg4.dll
MOD - [2013/10/02 20:29:22 | 000,035,680 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qico4.dll
MOD - [2013/10/02 20:29:20 | 000,033,120 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\Imageformats\qgif4.dll
MOD - [2013/10/02 20:28:48 | 000,438,624 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
MOD - [2013/10/02 20:28:02 | 000,606,560 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
MOD - [2013/09/11 04:26:52 | 003,279,768 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2013/04/15 13:26:16 | 000,391,600 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
MOD - [2013/04/15 13:26:16 | 000,059,280 | ---- | M] () -- C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
MOD - [2011/08/11 15:30:04 | 000,659,456 | ---- | M] () -- C:\Windows\SysWOW64\vmprp332.ax


========== Services (SafeList) ==========

SRV:64bit: - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011/12/05 09:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011/12/05 08:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013/10/15 05:47:23 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/10/08 14:28:15 | 000,275,696 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe -- (NIS)
SRV - [2013/09/11 04:26:44 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/07/25 09:40:44 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/07/02 11:19:30 | 000,093,072 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/18 11:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2012/12/14 02:42:10 | 000,277,616 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/10/08 11:42:54 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/04/28 10:20:06 | 000,163,456 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt&Wlan Coex Agent)
SRV - [2012/04/28 09:57:54 | 000,119,424 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2011/11/29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2011/08/17 17:52:05 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/10/15 05:38:03 | 000,177,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2013/09/27 05:18:30 | 001,147,480 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symefa64.sys -- (SymEFA)
DRV:64bit: - [2013/09/27 04:26:03 | 000,858,200 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2013/09/26 05:28:00 | 000,590,936 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symnets.sys -- (SymNetS)
DRV:64bit: - [2013/09/26 04:50:25 | 000,162,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\ccsetx64.sys -- (ccSet_NIS)
DRV:64bit: - [2013/08/29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2013/08/22 23:49:20 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)
DRV:64bit: - [2013/08/22 23:49:20 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV:64bit: - [2013/08/01 05:19:50 | 000,493,656 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symds64.sys -- (SymDS)
DRV:64bit: - [2013/07/31 06:13:30 | 000,264,280 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\ironx64.sys -- (SymIRON)
DRV:64bit: - [2013/07/31 05:44:44 | 000,036,952 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1501000.012\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2013/01/23 10:31:52 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2013/01/23 10:31:52 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2013/01/23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2013/01/23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2012/12/14 02:42:22 | 005,353,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2012/10/17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2012/10/08 11:42:36 | 000,030,056 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2012/07/17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012/05/31 17:06:50 | 002,811,904 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2012/05/21 15:25:32 | 000,789,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2012/05/21 15:25:32 | 000,357,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2012/05/21 15:25:32 | 000,019,264 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2012/04/28 10:09:24 | 000,550,528 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2012/04/28 10:08:30 | 000,281,472 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:64bit: - [2012/04/28 10:08:12 | 000,068,736 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:64bit: - [2012/04/28 10:07:36 | 000,168,064 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:64bit: - [2012/04/28 10:07:18 | 000,036,480 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:64bit: - [2012/04/28 10:07:00 | 000,030,848 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:64bit: - [2012/04/28 10:06:42 | 000,111,232 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
DRV:64bit: - [2012/04/28 10:06:18 | 000,341,120 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/06 10:31:00 | 000,958,800 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vm332avs.sys -- (vm332avs)
DRV:64bit: - [2011/12/05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2011/12/05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011/11/29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011/11/15 18:24:20 | 000,313,960 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtsuvstor.sys -- (RSUSBVSTOR)
DRV:64bit: - [2011/11/15 11:12:08 | 000,111,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2009/07/21 14:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 02:21:35 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthMtpEnum.sys -- (BthMtpEnum)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2013/10/17 08:55:31 | 000,521,816 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\IPSDefs\20131017.002\IDSviA64.sys -- (IDSVia64)
DRV - [2013/10/14 01:00:00 | 002,099,288 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\VirusDefs\20131017.023\ex64.sys -- (NAVEX15)
DRV - [2013/10/14 01:00:00 | 000,484,952 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2013/10/14 01:00:00 | 000,140,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2013/10/14 01:00:00 | 000,126,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\VirusDefs\20131017.023\eng64.sys -- (NAVENG)
DRV - [2013/10/02 05:20:13 | 001,525,848 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.2.1\Definitions\BASHDefs\20131002.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source= ... earchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source= ... earchTerms}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss& ... 5&tsp=5030
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.azet.sk/
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = AC D9 C1 AB 6C 9F CE 01 [binary data]
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE10SR
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source= ... earchTerms}
IE - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.azet.sk/"
FF - prefs.js..extensions.enabledAddons: %7BBBDA0591-3099-440a-AA10-41764D9DB4DB%7D:12.0.2.8%20-%201
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\coFFPlgn\ [2013/10/18 06:23:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\IPSFF [2013/10/15 06:40:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/09/03 09:23:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gabo\AppData\Roaming\mozilla\Extensions
[2013/09/03 09:23:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gabo\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2013/10/09 20:49:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gabo\AppData\Roaming\mozilla\Firefox\Profiles\fwqllimy.default\extensions
[2013/10/09 20:43:29 | 000,001,302 | ---- | M] () -- C:\Users\gabo\AppData\Roaming\mozilla\firefox\profiles\fwqllimy.default\searchplugins\searchgol.xml
[2013/10/09 21:44:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/10/09 21:44:37 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/10/15 06:40:53 | 000,000,000 | ---D | M] (Norton Vulnerability Protection) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.2.1\IPSFF

========== Chrome ==========

CHR - default_search_provider: qvo6 (Enabled)
CHR - default_search_provider: search_url = http://search.qvo6.com/web/?utm_source= ... earchTerms}
CHR - default_search_provider: suggest_url =
CHR - Extension: Dokumenty Google = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: H\u013Eada\u0165 v Google = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Norton Identity Protection = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_1\
CHR - Extension: Chrome In-App Payments service = C:\Users\gabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1\

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O3:64bit: - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\athbttray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\btvstack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE (Vimicro)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1000..\Run: [] File not found
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1000..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1000..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1000..\Run: [TomTomHOME.exe] C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1001..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-389219554-2834428210-2938922044-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{954ADBFB-E636-4D8B-AA69-2946A1FBD49E}: DhcpNameServer = 195.12.128.1 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D0A28DB5-7E58-45F2-9773-41D4809761C1}: DhcpNameServer = 212.27.40.241 212.27.40.240
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\Windows\SysWow64\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013/10/18 13:34:02 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\gabo\Desktop\OTL.exe
[2013/10/16 10:59:34 | 000,000,000 | ---D | C] -- C:\Users\gabo\Desktop\Disk
[2013/10/15 05:39:17 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
[2013/10/12 12:13:45 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013/10/12 12:13:45 | 000,000,000 | ---D | C] -- C:\rsit
[2013/10/11 06:47:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
[2013/10/11 06:47:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nokia
[2013/10/09 21:44:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013/10/09 20:44:09 | 000,000,000 | ---D | C] -- C:\ProgramData\eSafe
[2013/10/09 20:43:29 | 000,000,000 | ---D | C] -- C:\ProgramData\BitGuard
[2013/10/09 20:43:00 | 000,000,000 | ---D | C] -- C:\Users\gabo\AppData\Local\BonanzaDealsLive
[2013/10/09 20:43:00 | 000,000,000 | ---D | C] -- C:\ProgramData\BonanzaDealsLive
[2013/10/09 20:43:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BonanzaDealsLive
[2013/10/09 20:42:56 | 000,000,000 | ---D | C] -- C:\Users\gabo\AppData\Roaming\AffiliatedUpdate
[2013/10/09 20:42:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BonanzaDeals
[2013/10/09 20:42:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013/10/09 05:54:55 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/10/09 05:54:55 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/10/09 05:54:55 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/10/09 05:54:54 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/10/09 05:54:54 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/10/09 05:54:54 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/10/09 05:54:54 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/10/09 05:54:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/10/09 05:54:54 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/10/09 05:54:54 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/10/09 05:54:54 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/10/09 05:54:53 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/10/09 05:54:53 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/10/09 05:54:53 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/10/09 05:54:53 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/10/09 05:45:34 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2013/10/09 05:45:28 | 005,549,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013/10/09 05:45:27 | 003,969,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013/10/09 05:45:27 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013/10/09 05:45:27 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013/10/09 05:45:27 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2013/10/09 05:45:27 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2013/10/09 05:45:27 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2013/10/09 05:45:27 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013/10/09 05:45:27 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013/10/09 05:45:27 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013/10/09 05:45:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013/10/09 05:45:27 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013/10/09 05:45:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013/10/09 05:45:25 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbser.sys
[2013/10/09 05:45:24 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2013/10/09 05:45:23 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2013/10/09 05:45:23 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2013/10/09 05:45:23 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2013/10/09 05:45:23 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2013/10/09 05:45:23 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2013/10/09 05:45:23 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2013/10/09 05:45:23 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2013/10/09 05:45:23 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2013/10/09 05:45:23 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2013/10/09 05:45:23 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2013/10/09 05:45:21 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2013/10/09 05:45:07 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 05:45:07 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 05:44:01 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2013/10/09 05:44:01 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2013/10/03 21:39:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/10/01 08:35:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/09/27 19:57:30 | 000,000,000 | ---D | C] -- C:\Users\gabo\Desktop\home
[2013/09/22 06:52:06 | 000,000,000 | ---D | C] -- C:\Users\gabo\AppData\Roaming\WinRAR
[2013/09/22 04:26:34 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013/09/22 04:26:30 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013/09/21 19:43:14 | 000,000,000 | ---D | C] -- C:\Users\gabo\AppData\Local\ElevatedDiagnostics
[2013/09/21 05:52:31 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013/09/21 05:52:31 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013/09/21 05:52:31 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013/09/21 05:52:31 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013/09/21 05:52:31 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/09/21 05:52:31 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013/09/21 05:52:31 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013/09/21 05:52:31 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013/09/21 05:52:31 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013/09/21 05:52:31 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013/09/21 05:52:31 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013/09/21 05:52:31 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013/09/21 05:52:31 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013/09/21 05:52:31 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013/09/21 05:52:31 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013/09/21 05:52:31 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013/09/21 05:52:31 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013/09/21 05:52:31 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013/09/21 05:52:31 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013/09/21 05:52:31 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013/09/21 05:52:31 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013/09/21 05:52:31 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013/09/21 05:52:31 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013/09/21 05:52:31 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013/09/21 05:52:31 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013/09/21 05:52:31 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013/09/21 05:52:31 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013/09/21 05:52:31 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013/09/21 05:52:31 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013/09/21 05:52:31 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013/09/21 05:52:31 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013/09/21 05:52:31 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013/09/21 05:52:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013/09/21 05:52:31 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013/09/21 05:52:31 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013/09/21 05:52:31 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/09/21 05:52:31 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013/09/21 05:52:31 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013/09/21 05:52:31 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013/09/21 05:52:31 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013/09/21 05:52:31 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/09/21 05:52:31 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013/09/21 05:52:31 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013/09/21 05:52:31 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013/09/21 05:52:31 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013/09/21 05:52:31 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013/09/21 05:52:31 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013/09/21 05:52:31 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013/09/21 05:52:31 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013/09/21 05:52:31 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013/09/21 05:52:31 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013/09/21 05:52:31 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013/09/21 05:52:31 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013/09/21 05:51:39 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013/09/21 05:51:39 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013/09/21 05:51:39 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013/09/21 05:51:39 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013/09/21 05:51:39 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013/09/21 05:51:39 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013/09/21 05:51:39 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013/09/21 05:51:39 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013/09/21 05:51:39 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013/09/21 05:51:39 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013/09/21 05:51:39 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013/09/21 05:51:39 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013/09/21 05:51:39 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013/09/21 05:51:39 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013/09/21 05:51:39 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013/09/21 05:51:39 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013/09/21 05:51:39 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013/09/21 05:51:39 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013/09/21 05:51:39 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013/09/21 05:51:39 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/09/21 05:51:39 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/09/21 05:51:39 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/09/21 05:51:39 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/09/21 05:26:26 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2013/09/21 05:26:26 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2013/09/21 05:26:26 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2013/09/21 05:26:26 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013/09/21 05:26:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2013/09/21 05:26:26 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2013/09/21 05:26:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2013/09/21 05:26:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2013/09/21 05:26:26 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013/09/21 05:26:26 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013/09/21 05:26:26 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013/09/21 05:26:26 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013/09/21 05:26:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013/09/21 05:26:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013/09/21 05:26:22 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2013/09/21 05:26:21 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2013/09/21 05:26:21 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2013/09/21 05:26:13 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2013/09/21 05:26:13 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2013/09/21 05:26:09 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013/09/21 05:26:09 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2013/09/21 05:26:09 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013/09/21 05:26:07 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
[2013/09/21 05:26:07 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
[2013/09/21 05:26:07 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
[2013/09/21 05:25:58 | 000,155,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2013/09/21 05:25:58 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys
[2013/09/21 05:25:57 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
[2013/09/21 05:25:57 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2013/09/21 05:25:38 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013/09/21 05:25:38 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013/09/21 05:25:30 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2013/09/21 05:25:28 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2013/09/21 05:25:27 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2013/09/21 05:25:27 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2013/09/21 05:25:27 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2013/09/21 05:25:27 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2013/09/21 05:25:27 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2013/09/21 05:24:20 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2013/09/21 05:24:20 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013/09/21 05:24:20 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2013/09/21 05:24:20 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2013/09/21 05:24:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2013/09/21 05:23:00 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013/09/21 05:23:00 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013/09/21 05:22:26 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
[2013/09/21 05:22:26 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2013/09/21 05:22:26 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
[2013/09/21 05:22:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2013/09/21 05:22:26 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
[2013/09/21 05:22:26 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll
[2013/09/21 05:20:32 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe
[2013/09/19 13:28:45 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll

[melondubnica]

========== Files - Modified Within 30 Days ==========

[2013/10/18 13:40:18 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/10/18 13:33:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\gabo\Desktop\OTL.exe
[2013/10/18 06:28:08 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/10/18 06:28:08 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/10/18 06:26:31 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/10/18 06:26:31 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/10/18 06:26:31 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/10/18 06:20:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/10/18 06:20:36 | 3144,433,664 | -HS- | M] () -- C:\hiberfil.sys
[2013/10/18 06:13:05 | 000,002,501 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk
[2013/10/18 06:12:16 | 002,077,283 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\Cat.DB
[2013/10/18 06:11:44 | 000,015,033 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\VT20131002.007
[2013/10/15 09:47:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/10/15 05:47:22 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/10/15 05:47:22 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/10/15 05:38:03 | 000,177,752 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2013/10/15 05:38:03 | 000,008,222 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2013/10/15 05:38:03 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2013/10/12 12:13:30 | 000,832,273 | ---- | M] () -- C:\Users\gabo\Desktop\RSITx64.exe
[2013/10/11 06:47:43 | 000,002,089 | ---- | M] () -- C:\Users\Public\Desktop\Nokia Suite.lnk
[2013/10/09 21:44:39 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/10/09 05:58:42 | 000,432,104 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/10/08 14:27:43 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\isolate.ini
[2013/10/03 21:39:17 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013/10/03 08:13:14 | 000,008,192 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\srtsp64.cat
[2013/09/29 04:38:04 | 000,008,192 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symnet64.cat
[2013/09/29 03:44:10 | 000,008,202 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\ccsetx64.cat
[2013/09/27 18:47:25 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
[2013/09/27 05:18:30 | 001,147,480 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symefa64.sys
[2013/09/27 05:18:30 | 000,008,194 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symefa64.cat
[2013/09/27 05:18:30 | 000,003,433 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symefa.inf
[2013/09/27 04:26:03 | 000,858,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1501000.012\srtsp64.sys
[2013/09/27 04:26:03 | 000,001,437 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\srtsp64.inf
[2013/09/26 05:28:00 | 000,590,936 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symnets.sys
[2013/09/26 05:27:52 | 000,001,440 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\symnet.inf
[2013/09/26 04:50:25 | 000,162,392 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1501000.012\ccsetx64.sys
[2013/09/26 04:50:25 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1501000.012\ccsetx64.inf
[2013/09/23 01:27:49 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/09/23 01:27:48 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/09/23 01:27:48 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/09/23 01:27:48 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/09/23 01:27:48 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/09/23 00:55:16 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/09/23 00:54:55 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/09/23 00:54:51 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/09/23 00:54:51 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/09/23 00:54:50 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/09/23 00:54:50 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/09/23 00:54:50 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/09/23 00:54:50 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/09/21 05:52:31 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013/09/21 05:52:31 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013/09/21 05:52:31 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013/09/21 05:52:31 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013/09/21 05:52:31 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/09/21 05:52:31 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013/09/21 05:52:31 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013/09/21 05:52:31 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013/09/21 05:52:31 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013/09/21 05:52:31 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013/09/21 05:52:31 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013/09/21 05:52:31 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013/09/21 05:52:31 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013/09/21 05:52:31 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013/09/21 05:52:31 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013/09/21 05:52:31 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013/09/21 05:52:31 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013/09/21 05:52:31 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013/09/21 05:52:31 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013/09/21 05:52:31 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013/09/21 05:52:31 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013/09/21 05:52:31 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013/09/21 05:52:31 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013/09/21 05:52:31 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013/09/21 05:52:31 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013/09/21 05:52:31 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013/09/21 05:52:31 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013/09/21 05:52:31 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013/09/21 05:52:31 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013/09/21 05:52:31 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013/09/21 05:52:31 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013/09/21 05:52:31 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013/09/21 05:52:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013/09/21 05:52:31 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013/09/21 05:52:31 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013/09/21 05:52:31 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/09/21 05:52:31 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013/09/21 05:52:31 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013/09/21 05:52:31 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013/09/21 05:52:31 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013/09/21 05:52:31 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/09/21 05:52:31 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013/09/21 05:52:31 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013/09/21 05:52:31 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013/09/21 05:52:31 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013/09/21 05:52:31 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013/09/21 05:52:31 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013/09/21 05:52:31 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013/09/21 05:52:31 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013/09/21 05:52:31 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/09/21 05:52:31 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013/09/21 05:52:31 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013/09/21 05:52:31 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013/09/21 05:52:31 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013/09/21 05:52:31 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013/09/21 05:51:39 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013/09/21 05:51:39 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013/09/21 05:51:39 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013/09/21 05:51:39 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013/09/21 05:51:39 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013/09/21 05:51:39 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013/09/21 05:51:39 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013/09/21 05:51:39 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013/09/21 05:51:39 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013/09/21 05:51:39 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013/09/21 05:51:39 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013/09/21 05:51:39 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013/09/21 05:51:39 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013/09/21 05:51:39 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013/09/21 05:51:39 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013/09/21 05:51:39 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013/09/21 05:51:39 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013/09/21 05:51:39 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013/09/21 05:51:39 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013/09/21 05:51:39 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/09/21 05:51:39 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/09/21 05:51:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/09/21 05:51:39 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/09/21 05:51:39 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/09/21 04:48:36 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/09/21 04:39:47 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe

========== Files Created - No Company Name ==========

[2013/10/18 13:40:18 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/10/12 12:13:32 | 000,832,273 | ---- | C] () -- C:\Users\gabo\Desktop\RSITx64.exe
[2013/10/11 06:47:42 | 000,002,089 | ---- | C] () -- C:\Users\Public\Desktop\Nokia Suite.lnk
[2013/10/09 21:44:39 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/10/09 21:44:39 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/10/03 21:39:17 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013/09/27 18:47:25 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
[2013/09/21 05:52:31 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/09/21 05:52:31 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013/08/22 23:14:35 | 000,007,867 | ---- | C] () -- C:\Windows\Irremote.ini
[2013/08/22 23:14:28 | 000,001,024 | ---- | C] () -- C:\Users\gabo\.rnd
[2013/08/22 22:40:58 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2013/08/22 22:40:57 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2013/08/22 22:40:56 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013/08/22 21:45:12 | 000,001,779 | ---- | C] () -- C:\Windows\vm332Rmv.ini
[2013/08/22 21:45:12 | 000,001,779 | ---- | C] () -- C:\Windows\SysWow64\vm332Rmv.ini
[2012/12/14 02:42:30 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012/12/14 02:42:24 | 000,754,652 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
[2012/12/14 02:42:24 | 000,598,384 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin

========== ZeroAccess Check ==========

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/10/09 20:42:56 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\AffiliatedUpdate
[2013/09/02 18:25:17 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Canon
[2013/09/07 22:00:49 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\FileZilla
[2013/09/03 09:10:58 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Nokia
[2013/09/03 09:10:58 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Nokia Suite
[2013/09/03 09:06:31 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\PC Suite
[2013/09/03 09:23:28 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\TomTom
[2013/08/22 22:36:38 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\URSoft
[2013/10/16 21:36:08 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\XnView

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009/07/14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 07:08:49 | 000,032,524 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013/08/22 22:14:42 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: AGP440.SYS >
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009/07/14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009/07/14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010/11/20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012/06/02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010/11/20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2013/05/10 06:49:59 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=33ADF6E0853AB39EA1723BE82842C1D3 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_77d7a417f9359661\cryptsvc.dll
[2013/05/13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013/07/09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2012/06/02 07:32:25 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=456107D69D4EE850A559434F19EFEE65 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_d2beeccacd6d6c07\cryptsvc.dll
[2013/07/09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013/07/09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013/07/09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013/07/09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013/07/09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012/06/04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013/05/10 07:49:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=7FDC4626B01106A8EF328C88C7C0DEE3 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18150_none_d3f63f9bb1930797\cryptsvc.dll
[2013/05/11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2009/07/14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2012/06/02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012/06/02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2009/07/14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010/11/20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013/05/11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2012/06/02 07:25:12 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=BAF19B633933A9FB4883D27D66C39E9A -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_d22a7e2db457eb07\cryptsvc.dll
[2013/05/10 07:18:53 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=CA13C4F92BEE66DB48E58AB3223DDF6E -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_d4a14e5aca976a0c\cryptsvc.dll
[2013/05/13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2013/05/10 07:06:21 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=E122AA1C9A3CC46FF9DDDE46E5EB0C58 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22321_none_7882b2d71239f8d6\cryptsvc.dll
[2012/06/02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2012/06/02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2011/02/26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/02/25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009/07/14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010/11/20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTOR.SYS >
[2011/11/29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) MD5=C224331A54571C8C9162F7714400BBBD -- C:\Windows\SysNative\drivers\iaStor.sys
[2011/11/29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) MD5=C224331A54571C8C9162F7714400BBBD -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_9c981fcb416c038e\iaStor.sys

< MD5 for: IASTORV.SYS >
[2010/11/20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011/03/11 08:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011/03/11 08:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009/07/14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009/07/14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009/07/14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011/11/17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011/11/17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011/11/17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
[2012/06/04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2012/06/02 07:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011/11/17 08:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe

< MD5 for: NDIS.SYS >
[2010/12/29 12:45:14 | 000,947,584 | ---- | M] (Microsoft Corporation) MD5=02A1D495D9CD3C787BDE560CCC6A480E -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.20867_none_045d623d4ecba2f1\ndis.sys
[2010/12/29 12:33:33 | 000,950,656 | ---- | M] (Microsoft Corporation) MD5=303310C91F8C0740ED1C76851C759874 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.21628_none_066fff3d4bd0b870\ndis.sys
[2012/08/22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010/11/20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2010/12/29 12:41:29 | 000,947,584 | ---- | M] (Microsoft Corporation) MD5=A3151B3463EEA7E47F618F115D0D142E -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16726_none_03fe04d8358e7a0c\ndis.sys
[2010/12/29 12:57:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=C38B8AE57F78915905064A9A24DC1586 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17530_none_05d3903632c269df\ndis.sys
[2009/07/14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009/07/14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010/11/20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009/07/14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010/11/20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010/11/20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011/03/11 08:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011/03/11 08:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011/03/11 08:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009/07/14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011/03/11 08:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011/03/11 08:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011/03/11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009/07/14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2013/03/19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013/03/19 05:20:12 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=7180204786A9DED8723B2D8CF3CDD388 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_08a94e494c0cfd0a\smss.exe
[2013/08/29 03:04:30 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=B2B31D4C79EFD883097FA24D02E79C12 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22436_none_0ad6905f48fd53a8\smss.exe
[2013/08/02 07:06:34 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CB5DA3E44456D1084BCD87F5B1B3152B -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe
[2013/03/19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
[2013/08/02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\SysNative\smss.exe
[2013/08/02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe
[2013/03/19 05:19:03 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=FA64733BD65F52712F0545F56FDB4BE6 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_0838504e32dc743c\smss.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2012/10/03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013/09/08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013/09/08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2010/11/20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013/01/04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013/01/03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013/09/07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2009/07/14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013/07/06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013/01/03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013/01/04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012/10/03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
[2013/07/06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010/11/20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009/07/14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[6 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[24 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013/08/22 23:57:37 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Adobe
[2013/10/09 20:42:56 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\AffiliatedUpdate
[2013/09/08 06:15:23 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Atheros
[2013/09/02 18:25:17 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Canon
[2013/09/29 07:20:23 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\dvdcss
[2013/09/07 22:00:49 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\FileZilla
[2013/08/22 21:01:46 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Identities
[2013/08/22 21:44:56 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\InstallShield
[2013/08/22 21:25:58 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Intel
[2013/08/22 21:52:44 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Intel Corporation
[2013/08/22 22:14:48 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Macromedia
[2009/07/14 09:54:31 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Media Center Programs
[2013/08/22 23:00:31 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Media Player Classic
[2013/10/16 18:07:23 | 000,000,000 | --SD | M] -- C:\Users\gabo\AppData\Roaming\Microsoft
[2013/08/22 22:16:16 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Mozilla
[2013/08/22 23:22:24 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Nero
[2013/09/03 09:10:58 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Nokia
[2013/09/03 09:10:58 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Nokia Suite
[2013/09/03 09:06:31 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\PC Suite
[2013/10/18 13:52:22 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\Skype
[2013/09/03 09:23:28 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\TomTom
[2013/09/02 18:34:33 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\U3
[2013/08/22 22:36:38 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\URSoft
[2013/10/18 13:48:55 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\vlc
[2013/09/22 06:52:06 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\WinRAR
[2013/10/16 21:36:08 | 000,000,000 | ---D | M] -- C:\Users\gabo\AppData\Roaming\XnView

< %APPDATA%\*.exe /s >
[2006/12/07 10:45:12 | 000,110,592 | ---- | M] () -- C:\Users\gabo\AppData\Roaming\U3\00001619C1737314\cleanup.exe
[2006/12/07 10:45:12 | 003,096,576 | ---- | M] (SanDisk Corporation) -- C:\Users\gabo\AppData\Roaming\U3\00001619C1737314\Launchpad Removal.exe
[2006/12/11 12:20:18 | 004,603,904 | ---- | M] () -- C:\Users\gabo\AppData\Roaming\U3\00001619C1737314\LaunchPad.exe
[2006/12/07 10:45:12 | 000,049,152 | ---- | M] () -- C:\Users\gabo\AppData\Roaming\U3\00001619C1737314\U3AccessGrant.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2013/09/23 01:27:48 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2013/09/23 01:27:48 | 013,761,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" = "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 -- [2007/12/13 19:10:56 | 001,688,872 | ---- | M] (Nero AG)
"TomTomHOME.exe" = "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -- [2013/07/02 11:19:30 | 000,248,208 | ---- | M] (TomTom)
"" =
"NokiaSuite.exe" = C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray -- [2013/10/02 20:28:54 | 001,090,912 | ---- | M] (Nokia)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013/10/18 13:40:18 | 000,000,512 | ---- | M] () MD5=9661D0E83DA74E89371F449EFC61824A -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

[melondubnica]

< *loader* /s >
[2006/10/26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006/10/26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2007/12/13 22:25:38 | 000,111,912 | ---- | M] () -- \Program Files (x86)\Common Files\Nero\Shared\NSCLoader.dll
[2012/09/25 04:39:16 | 000,112,128 | ---- | M] () -- \Program Files (x86)\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2006/12/23 17:37:56 | 000,044,032 | ---- | M] () -- \Program Files (x86)\WinRAR\RarExtLoader.exe
[2007/12/11 16:33:20 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013/06/19 15:59:00 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013/06/19 15:59:00 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013/06/19 15:59:00 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2007/12/11 16:33:20 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\Nero8\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013/06/19 15:59:00 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013/06/19 15:59:00 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013/06/19 15:59:00 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013/09/03 09:06:48 | 001,848,076 | ---- | M] () -- \Users\gabo\AppData\Local\Temp\download_temp\maploaderzip-00.02.42.122.xml
[2013/04/11 10:02:54 | 000,010,819 | ---- | M] () -- \Users\gabo\AppData\Local\Temp\ish12319539\images\Loader.gif
[2013/04/11 10:02:54 | 000,010,819 | ---- | M] () -- \Users\gabo\AppData\Local\Temp\ish12320444\images\Loader.gif
[2013/09/14 10:43:40 | 000,000,121 | ---- | M] () -- \Users\gabo\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\62Q4BF59\fr-advideum.cdn.videoplaza.tv\com.videoplaza.bootloader.sol
[2013/08/23 02:21:15 | 000,000,905 | ---- | M] () -- \Users\gabo\AppData\Roaming\Microsoft\Windows\Recent\Windows Loader.lnk
[2008/06/10 14:02:12 | 000,000,051 | ---- | M] () -- \Users\gabo\Documents\TomTom\HOME\Backup\XL\Backup01\InternalMemory\bootloaderversion.txt
[2013/09/02 11:16:27 | 001,019,392 | ---- | M] () -- \Users\Public\Downloads\Norton\{NIS204040-SHPD-FSD33017}\NISDownloader.exe
[2013/10/15 05:34:13 | 001,021,968 | ---- | M] () -- \Users\Public\Downloads\Norton\{NIS21013-SHPD-FSD40014}\NISDownloader.exe
[2013/08/22 23:07:38 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2013/10/18 13:34:22 | 000,038,916 | ---- | M] () -- \Windows\Prefetch\RAREXTLOADER.EXE-8405D981.pf
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009/07/14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009/07/14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2009/07/14 09:44:39 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009/07/14 09:44:39 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.efi.mui_35ee487d
[2009/07/14 09:44:39 | 000,033,344 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winload.exe.mui_3bc5b827
[2009/07/14 09:44:39 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.efi.mui_f412814e
[2009/07/14 09:44:39 | 000,029,760 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a_winresume.exe.mui_ff8b5358
[2013/09/18 10:22:10 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013/09/18 10:22:10 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013/09/18 10:22:10 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013/09/18 10:22:10 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013/09/18 10:22:10 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009/07/14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009/07/14 09:43:41 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d28dabacfdb4dd1a.manifest
[2009/07/14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011/02/05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011/02/05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010/11/20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011/02/05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011/02/05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009/07/14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009/07/14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009/07/14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/11/30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/01/04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/10/09 06:12:15 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/10/09 06:13:11 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013/09/21 06:17:48 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/09/21 06:19:18 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013/10/09 06:16:14 | 002,659,328 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\10519c5a16fab95707f40b55941647b5\System.Runtime.Serialization.ni.dll
[2013/09/21 10:41:24 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/09/21 10:42:45 | 000,009,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\cda839ea462e123d42cb6d0883cf0f4d\System.Xml.Serialization.ni.dll
[2013/10/09 06:21:29 | 003,425,792 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\4d6c50c63ff4757f8825b82fb18eae3d\System.Runtime.Serialization.ni.dll
[2013/09/21 06:02:31 | 003,414,016 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\b00c987c6d13ba24a30b471ae12a23d5\System.Runtime.Serialization.ni.dll
[2013/09/21 06:02:38 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\cd2da26160fba6400b0353e558e35da6\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013/09/21 10:47:56 | 000,010,240 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\252726355005e3388101a3f1dfa1c727\System.Xml.Serialization.ni.dll
[2010/03/18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.amd64
[2010/03/18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.x86
[2013/10/09 05:53:55 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013/10/09 05:53:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013/10/09 05:53:59 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/09/11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 16:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013/09/11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010/03/18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2011/04/06 16:48:20 | 000,011,120 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009/07/14 09:44:15 | 000,005,120 | ---- | M] () -- \Windows\System32\sk-SK\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[2009/07/14 09:44:15 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\sk-SK\serialui.dll.mui
[2009/07/14 09:44:13 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552\serialui.dll.mui
[2009/07/14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2009/07/14 09:44:20 | 000,010,240 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64015f894ce7c72a\serial.sys.mui
[2009/07/14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009/06/10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2009/06/10 22:30:46 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c\System.Runtime.Serialization.dll
[2012/10/06 12:53:01 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df\System.Runtime.Serialization.dll
[2012/10/06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7\System.Runtime.Serialization.dll
[2010/11/05 03:52:16 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012/10/05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012/10/06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2009/06/10 22:30:43 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05\System.Runtime.Serialization.dll
[2012/10/06 12:53:00 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278\System.Runtime.Serialization.dll
[2012/10/06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70\System.Runtime.Serialization.dll
[2010/11/05 03:52:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012/10/05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012/10/06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2013/09/18 10:21:48 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2013/09/18 10:21:48 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2009/07/14 09:44:36 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_d5f23af62a751552_serialui.dll.mui_7d29d2a3
[2009/07/14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2009/07/14 09:44:38 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c_serialui.dll.mui_7d29d2a3
[2009/07/14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009/07/14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011/02/05 15:10:43 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16757_none_6dccf6b5c641c933.manifest
[2011/02/05 15:05:47 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.20897_none_6e2b53d0df7fd8c1.manifest
[2011/02/05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011/02/05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009/07/14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2009/07/14 04:26:23 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c.manifest
[2012/10/06 20:44:48 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df.manifest
[2012/10/06 21:00:33 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7.manifest
[2010/11/20 06:21:24 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012/10/05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012/10/05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2009/07/14 04:27:09 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05.manifest
[2012/10/06 20:46:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278.manifest
[2012/10/06 21:01:29 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70.manifest
[2010/11/20 06:22:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012/10/05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012/10/05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2009/07/14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012/10/06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012/10/06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010/11/20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012/10/05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012/10/05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2009/07/14 09:43:49 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_en-us_8f71d563bf7aa3c2.manifest
[2012/10/06 20:17:26 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_en-us_8f6cbf57bf7f3b35.manifest
[2012/10/06 20:18:44 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_en-us_789f01abd926b52d.manifest
[2012/10/05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012/10/05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2009/07/14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012/10/06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012/10/06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010/11/20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012/10/05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012/10/05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2009/07/14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012/10/06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012/10/06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010/11/20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012/10/05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012/10/05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009/06/10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009/06/10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012/10/06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012/10/06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010/11/05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012/10/05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012/10/06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2009/06/10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012/10/06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012/10/06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010/11/05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012/10/06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2009/07/14 09:44:15 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_sk-sk_79d39f727217a41c\serialui.dll.mui
[2009/07/14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009/06/10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012/10/06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012/10/06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010/11/05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012/10/05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012/10/06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 150 bytes -> C:\ProgramData\Temp:B3D74A13

< End of report >

[melondubnica]

OTL Extras logfile created on: 18. 10. 2013 13:38:02 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\gabo\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 0000041b | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

3,90 Gb Total Physical Memory | 2,31 Gb Available Physical Memory | 59,20% Memory free
7,81 Gb Paging File | 6,08 Gb Available in Paging File | 77,84% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,56 Gb Total Space | 54,10 Gb Free Space | 55,45% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 344,10 Gb Free Space | 93,48% Space Free | Partition Type: NTFS

Computer Name: GABO-PC | User Name: gabo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-389219554-2834428210-2938922044-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Prehliadať v XnView] -- "C:\Program Files (x86)\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Prehliadať v XnView] -- "C:\Program Files (x86)\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A5D42A94-2D7E-45EF-BF25-E058E6D5A510}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{15984EAD-1706-47D3-AB29-B52CE473E75E}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{23732110-179A-4B5E-945D-51AE13A7CA41}" = dir=in | app=c:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe |
"{2D98414A-EDDA-4A74-999D-051876A6F7CE}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{37C1C64B-552A-4012-91FA-C055B1DFCA9B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{58AD9757-7BE8-4B55-BCFB-FC6CB4A948E8}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{7370EA5B-E56D-4E54-B6A3-D4F6DB3D0E16}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{76D39CCE-B042-42CE-908F-1765D26A91C2}" = dir=in | app=c:\program files (x86)\common files\nokia\service layer\a\nsl_host_process.exe |
"{7783F012-E05F-4C56-93B8-B66CC6258E08}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{7AAEE264-2D10-4C54-B190-AB7DDE8685FB}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{7DA8CF82-954E-460B-B547-EB033D197DDA}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{C392FD19-5269-4D10-A7A9-C4200901F49B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{CCFC30B1-7A03-4F11-A986-88F364B1050E}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe |
"{D9ABE61A-9F6A-4534-B985-7DBF1F8FC4A8}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe |
"{E6BF1B50-FFDD-472E-B8F7-6C8D91C146AA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Atheros Bluetooth Suite (64)
"{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}" = Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed
"{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafický ovládač 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizácie NVIDIA 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
"99841829BE839365AA67B2AD0E50D371F59F8A1E" = Windows Driver Package - Lenovo (ACPIVPC) System (12/15/2011 7.1.0.1)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros WLAN Client Installation Program
"{29373274-977E-413C-A4DE-DC0F8E80C429}" = Nokia Connectivity Cable Driver
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.7
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver
"{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}" = PC Connectivity Solution
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{99072AB4-D795-44D5-9D65-E3C9F8322C97}" = TomTom HOME
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.05)
"{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0333}" = Lenovo EasyCamera
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{E2C00C8C-3D0C-40DF-BC67-44321C9E1051}" = Nero 8
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}" = Nokia Suite
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CCleaner" = CCleaner (remove only)
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.2.5 (Full)
"Mozilla Firefox 24.0 (x86 sk)" = Mozilla Firefox 24.0 (x86 sk)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NIS" = Norton Internet Security
"Nokia Suite" = Nokia Suite
"TeamViewer 6" = TeamViewer 6
"VLC media player" = VLC media player 2.0.7
"WinRAR archiver" = WinRAR
"XnView_is1" = XnView 2.04
"Xvid_is1" = Xvid 1.1.3 final uninstall
"Your Uninstaller! 2008_is1" = Your Uninstaller! 2008 Version 6.0

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 16. 10. 2013 1:05:34 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 16. 10. 2013 1:05:34 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 2:38:04 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 2:38:04 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 6:23:08 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 6:23:09 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 13:08:06 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 17. 10. 2013 13:08:06 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 18. 10. 2013 0:26:31 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 18. 10. 2013 0:26:31 | Computer Name = gabo-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01B
language ID. The first DWORD in the Data section contains the Win32 error code.

[ System Events ]
Error - 15. 10. 2013 7:35:33 | Computer Name = gabo-PC | Source = DCOM | ID = 10010
Description =

Error - 15. 10. 2013 7:37:04 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 15. 10. 2013 18:08:14 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 16. 10. 2013 1:01:12 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 17. 10. 2013 2:31:49 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 17. 10. 2013 6:16:52 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 17. 10. 2013 13:03:05 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 18. 10. 2013 0:12:31 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 18. 10. 2013 0:15:38 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.

Error - 18. 10. 2013 0:20:47 | Computer Name = gabo-PC | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Službe Plánovač úloh sa nepodarilo načítať úlohy pri spúšťaní služby.
Ďalšie údaje: Hodnota chyby: 2147942402.


< End of report >

[Márty84]

Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze


Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[melondubnica]

tak pocitac bol kupeny na Slovensku bez OS, a zaslany do Francuzka a mna kamarat poziadal aby som mu skontroloval PC ze mu blbne a cistim mu ho cez team viewer lebo on sa v PC nevyzna, system mu niekto tam instaloval. vraj z CD a vybrali z viac moznosti win 7 a ultimate vraj je najlepsi. vysledky zaslem o chvilu ked Mban doscenuje bude to trvat trosku dlhsie niekolko hodin, nakolko disk je dost velky.

[melondubnica]

prikladam vysledok z M ban:

Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org

Verzia databázy: v2013.10.18.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
gabo :: GABO-PC [administrátor]

Ochrana: Zapnuté

18. 10. 2013 18:10:27
MBAM-log-2013-10-18 (19-21-02).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 347835
Uplynutý čas: 37 min, 11 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 10
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Žiadna úloha nevykonaná.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\qvo6Software (PUP.Optional.qvo6.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.

Detegované registračné hodnoty: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Dáta: http://www.searchgol.com/?babsrc=HP_ss& ... 5&tsp=5030 -> Žiadna úloha nevykonaná.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Dáta: 0W0U -> Žiadna úloha nevykonaná.

Detegované položky registračných dát: 3
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (Hijack.StartPage) -> Škodlivý: (http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198) Dobrý: (http://www.google.com) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (Hijack.StartPage) -> Škodlivý: (http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198) Dobrý: (http://www.google.com) -> Žiadna úloha nevykonaná.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (Hijack.StartPage) -> Škodlivý: (http://www.qvo6.com/?utm_source=b&utm_m ... 1381344198) Dobrý: (http://www.google.com) -> Žiadna úloha nevykonaná.

Detegované priečinky: 12
C:\ProgramData\BitGuard\2.6.1694.246 (PUP.Optional.BitGuard.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\mt_ffx\searchgol (PUP.Optional.SearchGolTB.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\mt_ffx\searchgol\searchgol (PUP.Optional.SearchGolTB.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\mt_ffx\searchgol\searchgol\1.8.16.19 (PUP.Optional.SearchGolTB.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BonanzaDealsLive\Update (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BonanzaDealsLive\Update\Log (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\Program Files (x86)\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
C:\Program Files (x86)\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.

Detegované súbory: 21
C:\$Recycle.Bin\S-1-5-21-389219554-2834428210-2938922044-1000\$RT44BAL.exe (PUP.Optional.InstallCore) -> Žiadna úloha nevykonaná.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\ICReinstall_FLVPlayerSetup.exe (PUP.Optional.InstallCore) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\ccp.exe (PUP.Optional.Conduit.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\MySgolTB.exe (PUP.Optional.SearchGolTB.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\04AA23EC-BAB0-7891-809D-564A7B9A83B8\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\12319976.Uninstall\__Uninstall_.exe (PUP.Optional.InstallCore) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\eIntaller\7EBA654CFDFA4cddA0F9F78C6212FA77\eXQ.exe (PUP.Optional.Elex) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\is1412836710\11773297_stp\SearchGol.exe (PUP.Optional.PCFixSpeed.A) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\is1412836710\11773353_stp\cor_ar_qvo6.exe (PUP.Optional.Elex) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\is1412836710\11773382_stp\wajam_download.exe (PUP.Optional.Wajam) -> Žiadna úloha nevykonaná.
C:\Users\gabo\AppData\Local\Temp\is1412836710\11773467_stp\bd.exe (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.
D:\Windows Loader v2.0.6-DAZ\Windows Loader v2.0.6-DAZ\Windows Loader\Windows Loader.exe (Backdoor.Agent.DC) -> Žiadna úloha nevykonaná.
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\qvo6.xml (PUP.Optional.qvo6.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings (PUP.Optional.BitGuard.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm (PUP.Optional.BitGuard.A) -> Žiadna úloha nevykonaná.
C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log (PUP.Optional.BonanzaDeals.A) -> Žiadna úloha nevykonaná.

(koniec)

[Márty84]

Nalezy nechte odstranit.

No a jelikoz tam vidim crack na windows, pravidla fora mi nedovoluji pokracovat

[melondubnica]

kazdopadne dakujem aj tak za pomoc a Vas cas, no moj pocitac to nie je, poziadal ma len kamarat o pomoc tak ako som pisal v predchadzajucom prispevku , tak som mu vyhovel. vsetko som zmazal ako ste napisali a vyzera ze je vse ok a este k tomu win 7, pital som sa kamarata a on pisal ze vse si dal instalovat a za to aj platil nejakemu slovakovi vo francuzsku, comu aj verim nakolko ma aj antivirak nortom ktory si zakupil licenciu na 3 PC, on urcite nedaval win 7 a ani nevedel ze je nelegalny, co mu aj dost vadi nakolko vo francuzku idu tvrdo po takychto PC, co uz je na skodu ze sa mu ten pc nedocistil uplne, co uz no,
a este jedna vec poziadal ma ze ste boli taky ochotny ze by rad zaslal maly prispevok na chod fora, ale nema paypal tak zaslem ja za neho, ja uz som zasielal kedysi obcas prispejem tak by som poprosil kam zaslat lebo uz si to nepamatam.
takze este raz vam dakujem za vas cas a pomoc a prajem hodne zdaru.

[Márty84]

Pokud platil i za system, mel by zadat penize zpet. Ten crack tam je. Tezko by ho tam nekdo daval jen tak na ozdobu I kdyz mozne je vsechno

http://forum.viry.cz/viewtopic.php?f=7&t=78175 Za pripadny prispevek dekujeme

Nemate zac

Mejte se a treba zase nekdy, pokud mozno s legalnim systemem