rosím o radu, popis failu je celkem dlouhy tak pozorně čtete Smile
Mám flashku 8GB, a je na ní 5GB dat, převážně písniček, ale to je irelevantní.
Problém je ten že se všechny zobrazují jako zástupce, mají 1kb a když je zkopíruji tak samozřejmě jako zástupce...takže si je pak nespustím, spustit přímo z flashky to jde.
Když dám vlastnosti/obecné tak je označene políčko archivovat, avšak když ho odoznačním a dám použít,poté ok abych okénko zavřel a následně dám znovu vlastnosti/obecné tak je to znovu jako archivovane.
Pokud dám otevřít umístění souboru tak je v C:\windows\system32 a odkazuje na program cmd.
Problémy trvají od doby co jsem fleshku použil 1x jako medium pro uložení v tiskárně HP.
ještě dodám že jako zástupci se tvaří jen složky a soubory po otevření fleshky, pokud otevřu složku tak v ní je všechno v cajku. Asi mě nezbude než vykopírovat obsah těch složek jednu po druho a pak těch pár mp3 co je bez složky stáhnout znova :/
edit: naformatovano, cokoliv co tam vložim je opět zástupce+ po formatovani se tam oběvil soubor s názvem yyhnxpveqe který to asi všechno zpusobuje
už jsem boužil usbfresher, usb disinfektor ale dal už nevim co :/
Help: ''uzamknutá'' flashka
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Help: ''uzamknutá'' flashka
Zdravim 
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784
Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784 Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)
- Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
- Spustte a kliknete na Deletion
- Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Help: ''uzamknutá'' flashka
spraveno 
super díki 
příkládám log, ale asi je bezpředmětný když už je to spraveno
Logfile of random's system information tool 1.09 (written by random/random)
Run by Kuba at 2013-12-02 23:17:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 233 GB (66%) free of 351 GB
Total RAM: 3558 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:17:50, on 2.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal
Running processes:
C:\windows\SysWOW64\Rundll32.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kuba.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: BS Player ControlBar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [BackgroundContainer] "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [USBDriveFresher] C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [YYHNXP~1] "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
O4 - HKCU\..\Run: [yyhnxpveqe] "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 564c81d66252657e082919bce2f72f30.exe
O4 - Startup: a.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Ralink UPnP Media Server (RaMediaServer) - Unknown owner - C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12621 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
atieclxx
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
taskeng.exe {038B0150-063F-4853-9466-83CC6267DD84}
"C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe"
C:\windows\SysWOW64\Rundll32.exe "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 5392
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
"C:\windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=1300.1.1033311909 --type=renderer "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=5d6a8924-fcbb-4d42-a69f-6c166ad9bc3a /coreSdkOptions=4126 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\68da917a-3f7a-462d-b7f2-1421ffdef72c-21a4-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\"
"C:\Program Files\Windows Sidebar\sidebar.exe" /addGadget
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3800.0.1448643933\711984013" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --gpu-vendor-id=0x1002 --gpu-device-id=0x9648 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.901.3.5000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --channel="3800.1.958209880\959036269" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.2.475146391\1159386722" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="3800.3.450499292\1298609124" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3800.5.1721291523\1605139532" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b3021d04-205b-4b2d-b313-2a88e61884d3 -SystemEventPortName:HostProcess-df99e021-893a-4399-8508-028f375fa168 -IoCancelEventPortName:HostProcess-8037a972-eb52-448b-8b8e-9278de1dcd25 -NonStateChangingEventPortName:HostProcess-d2e39f4d-f5a5-45e6-a692-de709aec3a28 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0554c74a-9514-4a75-845f-01a72e69e244 -DeviceGroupId:WpdFsGroup
taskeng.exe {D459402A-7BED-483A-B6BC-05615F5B3042}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.7.2020767354\817768226" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.8.576318382\1861104834" /prefetch:673131151
wmiadap.exe /R /T
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Kuba\Downloads\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\windows\tasks\AutoKMS.job
C:\windows\tasks\AutoKMSDaily.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-07 81024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner64.dll [2012-01-14 750064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-07 69760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2012-01-14 433648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-04-22 11831400]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-22 2538280]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2012-01-14 206176]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-01-14 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-01-14 9769888]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-01-14 5908928]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"=C:\windows\SysWOW64\Rundll32.exe [2009-07-14 44544]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-10-30 1820584]
"USBDriveFresher"=C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe [2011-08-29 3380224]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"YYHNXP~1"=C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS []
"yyhnxpveqe"=C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-12-15 343168]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2010-01-15 536576]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-01-14 329056]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-11-07 4956176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
564c81d66252657e082919bce2f72f30.exe
a.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0xFFFFFFFF
"NoDriveTypeAutoRun"=36
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-12-02 23:17:44 ----D---- C:\rsit
2013-12-02 23:17:44 ----D---- C:\Program Files\trend micro
2013-12-02 22:11:31 ----D---- C:\Users\Kuba\AppData\Roaming\AVG2014
2013-12-02 22:10:30 ----D---- C:\Users\Kuba\AppData\Roaming\TuneUp Software
2013-12-02 22:09:25 ----HD---- C:\$AVG
2013-12-02 22:09:24 ----D---- C:\ProgramData\AVG2014
2013-12-02 22:08:44 ----D---- C:\Program Files (x86)\AVG
2013-12-02 22:01:18 ----HD---- C:\ProgramData\Common Files
2013-12-02 22:01:18 ----D---- C:\ProgramData\MFAData
2013-12-02 21:59:26 ----A---- C:\windows\system32\PerfStringBackup.TMP
2013-12-02 21:58:14 ----D---- C:\ProgramData\IsolatedStorage
2013-12-02 21:58:01 ----D---- C:\Program Files (x86)\USBDriveFresher
2013-12-02 19:06:00 ----RASHD---- C:\autorun.inf
2013-11-25 21:58:50 ----D---- C:\Users\Kuba\AppData\Roaming\Bitcoin
2013-11-25 21:58:37 ----D---- C:\Program Files (x86)\Bitcoin
2013-11-22 03:26:30 ----D---- C:\windows\SYSWOW64\Wat
2013-11-22 03:26:30 ----D---- C:\windows\system32\Wat
2013-11-21 08:16:24 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-11-21 08:16:24 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\occache.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-11-20 10:21:31 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-11-20 10:21:31 ----A---- C:\windows\system32\elshyph.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wininet.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wextract.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\webcheck.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\vbscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\urlmon.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\pngfilt.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\occache.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msrating.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msls31.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmler.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmled.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtml.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshta.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedssync.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedsbs.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeeds.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jsproxy.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\inseng.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\imgutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iexpress.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieUnatt.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieui.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesysprep.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iertutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iepeers.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\system32\IEAdvpack.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtmsft.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\FntCache.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d2d1.dll
2013-11-20 10:00:27 ----A---- C:\windows\system32\spoolsv.exe
2013-11-20 10:00:25 ----A---- C:\windows\splwow64.exe
2013-11-20 09:36:36 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-11-20 09:36:35 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-11-20 09:36:35 ----A---- C:\windows\system32\wmi.dll
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 10:38:53 ----A---- C:\windows\system32\browserchoice.exe
2013-11-18 08:04:04 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 08:04:04 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFSvc.dll
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFx.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFHost.exe
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\crypt32.dll
2013-11-14 16:38:27 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\authui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\authui.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspisrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsass.exe
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsasrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-14 16:38:03 ----A---- C:\windows\SYSWOW64\gdi32.dll
2013-11-14 16:38:03 ----A---- C:\windows\system32\gdi32.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-14 16:37:36 ----A---- C:\windows\SYSWOW64\comctl32.dll
2013-11-14 16:37:36 ----A---- C:\windows\system32\comctl32.dll
2013-11-14 16:37:20 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-11-14 16:37:20 ----A---- C:\windows\system32\poqexec.exe
2013-11-14 16:37:18 ----A---- C:\windows\system32\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-11-14 16:37:05 ----A---- C:\windows\system32\mstscax.dll
2013-11-14 16:37:04 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\aaclient.dll
2013-11-14 16:36:54 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-11-14 16:36:54 ----A---- C:\windows\system32\wintrust.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\qdvd.dll
2013-11-14 16:36:35 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-11-14 16:36:35 ----A---- C:\windows\system32\ntshrui.dll
2013-11-14 16:36:25 ----A---- C:\windows\system32\consent.exe
2013-11-14 16:36:25 ----A---- C:\windows\system32\appinfo.dll
2013-11-14 16:36:15 ----A---- C:\windows\SYSWOW64\webio.dll
2013-11-14 16:36:15 ----A---- C:\windows\system32\webio.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwansvc.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwanprotdim.dll
2013-11-14 16:36:08 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-11-14 16:35:56 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-11-14 16:35:56 ----A---- C:\windows\system32\tzres.dll
2013-11-14 16:35:42 ----A---- C:\windows\system32\drivers\ataport.sys
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmfd.dll
2013-11-14 16:35:32 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-11-14 16:35:32 ----A---- C:\windows\system32\d3d11.dll
2013-11-14 16:35:29 ----A---- C:\windows\system32\drivers\ndis.sys
2013-11-14 16:35:28 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-11-14 16:35:23 ----A---- C:\windows\system32\KernelBase.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\winsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\smss.exe
2013-11-14 16:35:22 ----A---- C:\windows\system32\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\csrsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\conhost.exe
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-11-14 16:35:21 ----A---- C:\windows\system32\apisetschema.dll
2013-11-14 16:35:18 ----A---- C:\windows\system32\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\Wdfres.dll
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpwsx.dll
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-11-14 16:35:05 ----A---- C:\windows\system32\rpcrt4.dll
2013-11-14 16:35:04 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3.dll
2013-11-14 16:34:56 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-11-14 16:34:56 ----A---- C:\windows\system32\ncsi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlasvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\iphlpsvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-14 16:34:46 ----A---- C:\windows\system32\profsvc.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\davclnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-14 16:34:12 ----A---- C:\windows\system32\davclnt.dll
2013-11-14 16:34:10 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-11-14 16:34:10 ----A---- C:\windows\system32\dpnet.dll
2013-11-14 16:34:09 ----A---- C:\windows\SYSWOW64\qedit.dll
2013-11-14 16:34:09 ----A---- C:\windows\system32\qedit.dll
2013-11-14 16:34:03 ----A---- C:\windows\system32\OxpsConverter.exe
2013-11-14 16:33:40 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-11-14 16:33:40 ----A---- C:\windows\system32\usp10.dll
2013-11-14 16:33:37 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2013-11-14 16:33:36 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-14 16:33:35 ----A---- C:\windows\SYSWOW64\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\netio.sys
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\gameux.dll
2013-11-14 16:33:11 ----A---- C:\windows\system32\win32k.sys
2013-11-14 16:33:10 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-11-14 16:32:30 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-11-14 16:32:30 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\system32\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64win.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\ntdll.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\user.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-11-14 16:32:27 ----A---- C:\windows\system32\wow64cpu.dll
2013-11-14 16:32:27 ----A---- C:\windows\system32\ntvdm64.dll
2013-11-14 16:32:25 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-11-14 16:32:24 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-11-14 16:32:24 ----A---- C:\windows\system32\kerberos.dll
2013-11-14 16:32:19 ----A---- C:\windows\system32\msi.dll
2013-11-14 16:32:18 ----A---- C:\windows\SYSWOW64\msi.dll
2013-11-14 16:31:37 ----A---- C:\windows\system32\drivers\bthport.sys
2013-11-14 16:31:35 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-11-14 16:31:35 ----A---- C:\windows\system32\synceng.dll
2013-11-14 16:31:33 ----A---- C:\windows\system32\shell32.dll
2013-11-14 16:31:32 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-11-14 16:31:31 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-11-14 16:31:31 ----A---- C:\windows\system32\shdocvw.dll
2013-11-14 16:31:22 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-11-14 16:31:22 ----A---- C:\windows\system32\win32spl.dll
2013-11-14 16:31:21 ----A---- C:\windows\system32\taskhost.exe
2013-11-14 16:31:09 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-11-14 16:31:09 ----A---- C:\windows\system32\cryptdlg.dll
2013-11-14 16:30:58 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:58 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browser.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browcli.dll
2013-11-14 16:30:44 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-11-14 16:30:42 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-11-14 16:30:42 ----A---- C:\windows\system32\srcore.dll
2013-11-14 16:30:39 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-11-14 16:30:39 ----A---- C:\windows\system32\msvcrt.dll
2013-11-14 16:30:31 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-11-14 16:30:31 ----A---- C:\windows\system32\certutil.exe
2013-11-14 16:30:30 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-11-14 16:30:30 ----A---- C:\windows\system32\certenc.dll
2013-11-14 16:30:15 ----A---- C:\windows\system32\localspl.dll
2013-11-14 16:30:13 ----A---- C:\windows\system32\drivers\bowser.sys
2013-11-14 16:30:12 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-11-14 16:30:12 ----A---- C:\windows\system32\EncDec.dll
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-14 16:30:10 ----A---- C:\windows\system32\cdd.dll
2013-11-14 16:29:46 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-11-14 16:29:46 ----A---- C:\windows\system32\cdosys.dll
2013-11-14 16:29:41 ----A---- C:\windows\system32\scavengeui.dll
2013-11-14 16:29:40 ----A---- C:\windows\SYSWOW64\packager.dll
2013-11-14 16:29:40 ----A---- C:\windows\system32\packager.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAPOFX1_5.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAPOFX1_5.dll
2013-11-13 20:18:02 ----A---- C:\windows\SYSWOW64\xactengine3_7.dll
2013-11-13 20:18:02 ----A---- C:\windows\system32\xactengine3_7.dll
2013-11-13 20:18:01 ----A---- C:\windows\SYSWOW64\D3DCompiler_43.dll
2013-11-13 20:18:01 ----A---- C:\windows\system32\D3DCompiler_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dcsx_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dcsx_43.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\xactengine3_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\xactengine3_6.dll
2013-11-13 20:17:58 ----A---- C:\windows\SYSWOW64\X3DAudio1_7.dll
2013-11-13 20:17:58 ----A---- C:\windows\system32\X3DAudio1_7.dll
2013-11-13 20:17:57 ----A---- C:\windows\system32\XAudio2_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\D3DCompiler_42.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\D3DCompiler_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\SYSWOW64\d3dcsx_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\system32\d3dcsx_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\SYSWOW64\d3dx11_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\system32\d3dx11_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\SYSWOW64\D3DX9_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\system32\D3DX9_42.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\d3dx10_41.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\D3DCompiler_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\SYSWOW64\D3DX9_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\system32\D3DX9_41.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\xactengine3_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAPOFX1_3.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\xactengine3_4.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\D3DCompiler_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\D3DCompiler_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\D3DX9_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\D3DX9_40.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\X3DAudio1_5.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\X3DAudio1_5.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\D3DCompiler_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\D3DCompiler_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\D3DX9_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\D3DX9_39.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\D3DCompiler_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\D3DCompiler_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\D3DX9_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\D3DX9_38.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\X3DAudio1_3.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\X3DAudio1_3.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DCompiler_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DCompiler_37.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\D3DCompiler_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\D3DCompiler_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\d3dx9_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\d3dx9_36.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\D3DCompiler_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\D3DCompiler_35.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\d3dx9_35.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\D3DCompiler_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\D3DCompiler_34.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\D3DCompiler_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\D3DCompiler_33.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\d3dx10.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\d3dx10.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\x3daudio1_1.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\x3daudio1_1.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\d3dx9_31.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\d3dx9_31.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xactengine2_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xactengine2_2.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xactengine2_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xactengine2_1.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\d3dx9_30.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\d3dx9_30.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_28.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_28.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_26.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_26.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_24.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_24.dll
2013-11-13 16:46:00 ----D---- C:\Program Files (x86)\Steam
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer Pro
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer
2013-11-13 13:18:46 ----D---- C:\Program Files (x86)\Webteh
2013-11-13 13:18:24 ----D---- C:\Program Files (x86)\Conduit
2013-11-13 13:18:23 ----D---- C:\ProgramData\Conduit
2013-11-13 13:18:22 ----D---- C:\Program Files (x86)\BS_Player_ControlBar
2013-11-12 16:04:29 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-11-12 15:56:40 ----A---- C:\windows\system32\wups2.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wucltux.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuaueng.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuauclt.exe
2013-11-12 15:56:26 ----A---- C:\windows\system32\wups.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wudriver.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wuapi.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuwebv.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuapp.exe
2013-11-12 15:16:31 ----A---- C:\windows\AutoKMS.ini
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\DESIGNER
2013-11-12 15:02:51 ----D---- C:\Program Files\Microsoft Synchronization Services
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft Sync Framework
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-11-12 15:02:26 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-11-12 15:00:19 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-12 14:59:19 ----D---- C:\Program Files\Microsoft Analysis Services
2013-11-12 14:59:19 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-11-12 14:59:00 ----D---- C:\Program Files\Microsoft Office
2013-11-12 14:58:57 ----D---- C:\ProgramData\Microsoft Help
2013-11-12 14:58:29 ----RHD---- C:\MSOCache
2013-11-12 14:52:45 ----D---- C:\Users\Kuba\AppData\Roaming\WinRAR
2013-11-12 14:52:36 ----A---- C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
2013-11-12 14:52:30 ----D---- C:\Program Files (x86)\WinRAR
2013-11-12 11:11:23 ----D---- C:\Program Files (x86)\Adobe
2013-11-12 11:11:04 ----D---- C:\ProgramData\Adobe
2013-11-12 10:04:24 ----ASH---- C:\pagefile.sys
2013-11-12 10:04:23 ----SHD---- C:\System Volume Information
2013-11-12 10:04:17 ----ASH---- C:\hiberfil.sys
2013-11-12 09:22:20 ----D---- C:\Users\Kuba\AppData\Roaming\Macromedia
2013-11-12 09:22:19 ----D---- C:\Users\Kuba\AppData\Roaming\Adobe
2013-11-12 09:13:41 ----D---- C:\Users\Kuba\AppData\Roaming\ATI
2013-11-12 09:11:04 ----D---- C:\Users\Kuba\AppData\Roaming\Identities
2013-11-12 09:10:58 ----SHD---- C:\$RECYCLE.BIN
2013-11-12 09:08:23 ----SD---- C:\Users\Kuba\AppData\Roaming\Microsoft
2013-11-12 09:08:23 ----D---- C:\Users\Kuba\AppData\Roaming\Media Center Programs
2013-11-12 09:06:48 ----SHD---- C:\Recovery
2013-11-05 21:55:48 ----A---- C:\windows\system32\drivers\avgdiska.sys
2013-11-04 21:52:42 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys
super díki příkládám log, ale asi je bezpředmětný když už je to spraveno
Logfile of random's system information tool 1.09 (written by random/random)
Run by Kuba at 2013-12-02 23:17:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 233 GB (66%) free of 351 GB
Total RAM: 3558 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:17:50, on 2.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal
Running processes:
C:\windows\SysWOW64\Rundll32.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kuba.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: BS Player ControlBar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [BackgroundContainer] "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [USBDriveFresher] C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [YYHNXP~1] "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
O4 - HKCU\..\Run: [yyhnxpveqe] "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 564c81d66252657e082919bce2f72f30.exe
O4 - Startup: a.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Ralink UPnP Media Server (RaMediaServer) - Unknown owner - C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12621 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
atieclxx
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
taskeng.exe {038B0150-063F-4853-9466-83CC6267DD84}
"C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe"
C:\windows\SysWOW64\Rundll32.exe "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 5392
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
"C:\windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=1300.1.1033311909 --type=renderer "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=5d6a8924-fcbb-4d42-a69f-6c166ad9bc3a /coreSdkOptions=4126 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\68da917a-3f7a-462d-b7f2-1421ffdef72c-21a4-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\"
"C:\Program Files\Windows Sidebar\sidebar.exe" /addGadget
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3800.0.1448643933\711984013" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --gpu-vendor-id=0x1002 --gpu-device-id=0x9648 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.901.3.5000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --channel="3800.1.958209880\959036269" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.2.475146391\1159386722" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="3800.3.450499292\1298609124" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3800.5.1721291523\1605139532" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b3021d04-205b-4b2d-b313-2a88e61884d3 -SystemEventPortName:HostProcess-df99e021-893a-4399-8508-028f375fa168 -IoCancelEventPortName:HostProcess-8037a972-eb52-448b-8b8e-9278de1dcd25 -NonStateChangingEventPortName:HostProcess-d2e39f4d-f5a5-45e6-a692-de709aec3a28 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0554c74a-9514-4a75-845f-01a72e69e244 -DeviceGroupId:WpdFsGroup
taskeng.exe {D459402A-7BED-483A-B6BC-05615F5B3042}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.7.2020767354\817768226" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.8.576318382\1861104834" /prefetch:673131151
wmiadap.exe /R /T
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Kuba\Downloads\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\windows\tasks\AutoKMS.job
C:\windows\tasks\AutoKMSDaily.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-07 81024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner64.dll [2012-01-14 750064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-07 69760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2012-01-14 433648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-04-22 11831400]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-22 2538280]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2012-01-14 206176]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-01-14 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-01-14 9769888]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-01-14 5908928]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"=C:\windows\SysWOW64\Rundll32.exe [2009-07-14 44544]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-10-30 1820584]
"USBDriveFresher"=C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe [2011-08-29 3380224]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"YYHNXP~1"=C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS []
"yyhnxpveqe"=C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-12-15 343168]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2010-01-15 536576]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-01-14 329056]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-11-07 4956176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
564c81d66252657e082919bce2f72f30.exe
a.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0xFFFFFFFF
"NoDriveTypeAutoRun"=36
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-12-02 23:17:44 ----D---- C:\rsit
2013-12-02 23:17:44 ----D---- C:\Program Files\trend micro
2013-12-02 22:11:31 ----D---- C:\Users\Kuba\AppData\Roaming\AVG2014
2013-12-02 22:10:30 ----D---- C:\Users\Kuba\AppData\Roaming\TuneUp Software
2013-12-02 22:09:25 ----HD---- C:\$AVG
2013-12-02 22:09:24 ----D---- C:\ProgramData\AVG2014
2013-12-02 22:08:44 ----D---- C:\Program Files (x86)\AVG
2013-12-02 22:01:18 ----HD---- C:\ProgramData\Common Files
2013-12-02 22:01:18 ----D---- C:\ProgramData\MFAData
2013-12-02 21:59:26 ----A---- C:\windows\system32\PerfStringBackup.TMP
2013-12-02 21:58:14 ----D---- C:\ProgramData\IsolatedStorage
2013-12-02 21:58:01 ----D---- C:\Program Files (x86)\USBDriveFresher
2013-12-02 19:06:00 ----RASHD---- C:\autorun.inf
2013-11-25 21:58:50 ----D---- C:\Users\Kuba\AppData\Roaming\Bitcoin
2013-11-25 21:58:37 ----D---- C:\Program Files (x86)\Bitcoin
2013-11-22 03:26:30 ----D---- C:\windows\SYSWOW64\Wat
2013-11-22 03:26:30 ----D---- C:\windows\system32\Wat
2013-11-21 08:16:24 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-11-21 08:16:24 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\occache.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-11-20 10:21:31 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-11-20 10:21:31 ----A---- C:\windows\system32\elshyph.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wininet.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wextract.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\webcheck.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\vbscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\urlmon.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\pngfilt.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\occache.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msrating.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msls31.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmler.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmled.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtml.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshta.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedssync.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedsbs.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeeds.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jsproxy.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\inseng.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\imgutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iexpress.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieUnatt.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieui.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesysprep.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iertutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iepeers.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\system32\IEAdvpack.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtmsft.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\FntCache.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d2d1.dll
2013-11-20 10:00:27 ----A---- C:\windows\system32\spoolsv.exe
2013-11-20 10:00:25 ----A---- C:\windows\splwow64.exe
2013-11-20 09:36:36 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-11-20 09:36:35 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-11-20 09:36:35 ----A---- C:\windows\system32\wmi.dll
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 10:38:53 ----A---- C:\windows\system32\browserchoice.exe
2013-11-18 08:04:04 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 08:04:04 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFSvc.dll
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFx.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFHost.exe
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\crypt32.dll
2013-11-14 16:38:27 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\authui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\authui.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspisrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsass.exe
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsasrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-14 16:38:03 ----A---- C:\windows\SYSWOW64\gdi32.dll
2013-11-14 16:38:03 ----A---- C:\windows\system32\gdi32.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-14 16:37:36 ----A---- C:\windows\SYSWOW64\comctl32.dll
2013-11-14 16:37:36 ----A---- C:\windows\system32\comctl32.dll
2013-11-14 16:37:20 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-11-14 16:37:20 ----A---- C:\windows\system32\poqexec.exe
2013-11-14 16:37:18 ----A---- C:\windows\system32\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-11-14 16:37:05 ----A---- C:\windows\system32\mstscax.dll
2013-11-14 16:37:04 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\aaclient.dll
2013-11-14 16:36:54 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-11-14 16:36:54 ----A---- C:\windows\system32\wintrust.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\qdvd.dll
2013-11-14 16:36:35 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-11-14 16:36:35 ----A---- C:\windows\system32\ntshrui.dll
2013-11-14 16:36:25 ----A---- C:\windows\system32\consent.exe
2013-11-14 16:36:25 ----A---- C:\windows\system32\appinfo.dll
2013-11-14 16:36:15 ----A---- C:\windows\SYSWOW64\webio.dll
2013-11-14 16:36:15 ----A---- C:\windows\system32\webio.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwansvc.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwanprotdim.dll
2013-11-14 16:36:08 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-11-14 16:35:56 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-11-14 16:35:56 ----A---- C:\windows\system32\tzres.dll
2013-11-14 16:35:42 ----A---- C:\windows\system32\drivers\ataport.sys
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmfd.dll
2013-11-14 16:35:32 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-11-14 16:35:32 ----A---- C:\windows\system32\d3d11.dll
2013-11-14 16:35:29 ----A---- C:\windows\system32\drivers\ndis.sys
2013-11-14 16:35:28 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-11-14 16:35:23 ----A---- C:\windows\system32\KernelBase.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\winsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\smss.exe
2013-11-14 16:35:22 ----A---- C:\windows\system32\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\csrsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\conhost.exe
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-11-14 16:35:21 ----A---- C:\windows\system32\apisetschema.dll
2013-11-14 16:35:18 ----A---- C:\windows\system32\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\Wdfres.dll
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpwsx.dll
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-11-14 16:35:05 ----A---- C:\windows\system32\rpcrt4.dll
2013-11-14 16:35:04 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3.dll
2013-11-14 16:34:56 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-11-14 16:34:56 ----A---- C:\windows\system32\ncsi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlasvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\iphlpsvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-14 16:34:46 ----A---- C:\windows\system32\profsvc.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\davclnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-14 16:34:12 ----A---- C:\windows\system32\davclnt.dll
2013-11-14 16:34:10 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-11-14 16:34:10 ----A---- C:\windows\system32\dpnet.dll
2013-11-14 16:34:09 ----A---- C:\windows\SYSWOW64\qedit.dll
2013-11-14 16:34:09 ----A---- C:\windows\system32\qedit.dll
2013-11-14 16:34:03 ----A---- C:\windows\system32\OxpsConverter.exe
2013-11-14 16:33:40 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-11-14 16:33:40 ----A---- C:\windows\system32\usp10.dll
2013-11-14 16:33:37 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2013-11-14 16:33:36 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-14 16:33:35 ----A---- C:\windows\SYSWOW64\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\netio.sys
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\gameux.dll
2013-11-14 16:33:11 ----A---- C:\windows\system32\win32k.sys
2013-11-14 16:33:10 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-11-14 16:32:30 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-11-14 16:32:30 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\system32\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64win.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\ntdll.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\user.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-11-14 16:32:27 ----A---- C:\windows\system32\wow64cpu.dll
2013-11-14 16:32:27 ----A---- C:\windows\system32\ntvdm64.dll
2013-11-14 16:32:25 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-11-14 16:32:24 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-11-14 16:32:24 ----A---- C:\windows\system32\kerberos.dll
2013-11-14 16:32:19 ----A---- C:\windows\system32\msi.dll
2013-11-14 16:32:18 ----A---- C:\windows\SYSWOW64\msi.dll
2013-11-14 16:31:37 ----A---- C:\windows\system32\drivers\bthport.sys
2013-11-14 16:31:35 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-11-14 16:31:35 ----A---- C:\windows\system32\synceng.dll
2013-11-14 16:31:33 ----A---- C:\windows\system32\shell32.dll
2013-11-14 16:31:32 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-11-14 16:31:31 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-11-14 16:31:31 ----A---- C:\windows\system32\shdocvw.dll
2013-11-14 16:31:22 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-11-14 16:31:22 ----A---- C:\windows\system32\win32spl.dll
2013-11-14 16:31:21 ----A---- C:\windows\system32\taskhost.exe
2013-11-14 16:31:09 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-11-14 16:31:09 ----A---- C:\windows\system32\cryptdlg.dll
2013-11-14 16:30:58 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:58 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browser.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browcli.dll
2013-11-14 16:30:44 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-11-14 16:30:42 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-11-14 16:30:42 ----A---- C:\windows\system32\srcore.dll
2013-11-14 16:30:39 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-11-14 16:30:39 ----A---- C:\windows\system32\msvcrt.dll
2013-11-14 16:30:31 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-11-14 16:30:31 ----A---- C:\windows\system32\certutil.exe
2013-11-14 16:30:30 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-11-14 16:30:30 ----A---- C:\windows\system32\certenc.dll
2013-11-14 16:30:15 ----A---- C:\windows\system32\localspl.dll
2013-11-14 16:30:13 ----A---- C:\windows\system32\drivers\bowser.sys
2013-11-14 16:30:12 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-11-14 16:30:12 ----A---- C:\windows\system32\EncDec.dll
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-14 16:30:10 ----A---- C:\windows\system32\cdd.dll
2013-11-14 16:29:46 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-11-14 16:29:46 ----A---- C:\windows\system32\cdosys.dll
2013-11-14 16:29:41 ----A---- C:\windows\system32\scavengeui.dll
2013-11-14 16:29:40 ----A---- C:\windows\SYSWOW64\packager.dll
2013-11-14 16:29:40 ----A---- C:\windows\system32\packager.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAPOFX1_5.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAPOFX1_5.dll
2013-11-13 20:18:02 ----A---- C:\windows\SYSWOW64\xactengine3_7.dll
2013-11-13 20:18:02 ----A---- C:\windows\system32\xactengine3_7.dll
2013-11-13 20:18:01 ----A---- C:\windows\SYSWOW64\D3DCompiler_43.dll
2013-11-13 20:18:01 ----A---- C:\windows\system32\D3DCompiler_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dcsx_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dcsx_43.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\xactengine3_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\xactengine3_6.dll
2013-11-13 20:17:58 ----A---- C:\windows\SYSWOW64\X3DAudio1_7.dll
2013-11-13 20:17:58 ----A---- C:\windows\system32\X3DAudio1_7.dll
2013-11-13 20:17:57 ----A---- C:\windows\system32\XAudio2_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\D3DCompiler_42.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\D3DCompiler_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\SYSWOW64\d3dcsx_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\system32\d3dcsx_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\SYSWOW64\d3dx11_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\system32\d3dx11_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\SYSWOW64\D3DX9_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\system32\D3DX9_42.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\d3dx10_41.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\D3DCompiler_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\SYSWOW64\D3DX9_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\system32\D3DX9_41.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\xactengine3_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAPOFX1_3.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\xactengine3_4.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\D3DCompiler_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\D3DCompiler_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\D3DX9_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\D3DX9_40.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\X3DAudio1_5.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\X3DAudio1_5.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\D3DCompiler_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\D3DCompiler_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\D3DX9_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\D3DX9_39.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\D3DCompiler_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\D3DCompiler_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\D3DX9_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\D3DX9_38.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\X3DAudio1_3.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\X3DAudio1_3.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DCompiler_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DCompiler_37.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\D3DCompiler_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\D3DCompiler_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\d3dx9_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\d3dx9_36.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\D3DCompiler_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\D3DCompiler_35.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\d3dx9_35.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\D3DCompiler_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\D3DCompiler_34.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\D3DCompiler_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\D3DCompiler_33.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\d3dx10.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\d3dx10.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\x3daudio1_1.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\x3daudio1_1.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\d3dx9_31.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\d3dx9_31.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xactengine2_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xactengine2_2.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xactengine2_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xactengine2_1.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\d3dx9_30.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\d3dx9_30.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_28.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_28.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_26.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_26.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_24.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_24.dll
2013-11-13 16:46:00 ----D---- C:\Program Files (x86)\Steam
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer Pro
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer
2013-11-13 13:18:46 ----D---- C:\Program Files (x86)\Webteh
2013-11-13 13:18:24 ----D---- C:\Program Files (x86)\Conduit
2013-11-13 13:18:23 ----D---- C:\ProgramData\Conduit
2013-11-13 13:18:22 ----D---- C:\Program Files (x86)\BS_Player_ControlBar
2013-11-12 16:04:29 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-11-12 15:56:40 ----A---- C:\windows\system32\wups2.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wucltux.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuaueng.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuauclt.exe
2013-11-12 15:56:26 ----A---- C:\windows\system32\wups.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wudriver.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wuapi.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuwebv.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuapp.exe
2013-11-12 15:16:31 ----A---- C:\windows\AutoKMS.ini
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\DESIGNER
2013-11-12 15:02:51 ----D---- C:\Program Files\Microsoft Synchronization Services
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft Sync Framework
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-11-12 15:02:26 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-11-12 15:00:19 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-12 14:59:19 ----D---- C:\Program Files\Microsoft Analysis Services
2013-11-12 14:59:19 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-11-12 14:59:00 ----D---- C:\Program Files\Microsoft Office
2013-11-12 14:58:57 ----D---- C:\ProgramData\Microsoft Help
2013-11-12 14:58:29 ----RHD---- C:\MSOCache
2013-11-12 14:52:45 ----D---- C:\Users\Kuba\AppData\Roaming\WinRAR
2013-11-12 14:52:36 ----A---- C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
2013-11-12 14:52:30 ----D---- C:\Program Files (x86)\WinRAR
2013-11-12 11:11:23 ----D---- C:\Program Files (x86)\Adobe
2013-11-12 11:11:04 ----D---- C:\ProgramData\Adobe
2013-11-12 10:04:24 ----ASH---- C:\pagefile.sys
2013-11-12 10:04:23 ----SHD---- C:\System Volume Information
2013-11-12 10:04:17 ----ASH---- C:\hiberfil.sys
2013-11-12 09:22:20 ----D---- C:\Users\Kuba\AppData\Roaming\Macromedia
2013-11-12 09:22:19 ----D---- C:\Users\Kuba\AppData\Roaming\Adobe
2013-11-12 09:13:41 ----D---- C:\Users\Kuba\AppData\Roaming\ATI
2013-11-12 09:11:04 ----D---- C:\Users\Kuba\AppData\Roaming\Identities
2013-11-12 09:10:58 ----SHD---- C:\$RECYCLE.BIN
2013-11-12 09:08:23 ----SD---- C:\Users\Kuba\AppData\Roaming\Microsoft
2013-11-12 09:08:23 ----D---- C:\Users\Kuba\AppData\Roaming\Media Center Programs
2013-11-12 09:06:48 ----SHD---- C:\Recovery
2013-11-05 21:55:48 ----A---- C:\windows\system32\drivers\avgdiska.sys
2013-11-04 21:52:42 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys
Re: Help: ''uzamknutá'' flashka
======List of files/folders modified in the last 1 month======
2013-12-02 23:17:44 ----RD---- C:\Program Files
2013-12-02 23:10:49 ----D---- C:\windows\Temp
2013-12-02 22:51:05 ----D---- C:\Windows
2013-12-02 22:24:37 ----D---- C:\windows\System32
2013-12-02 22:24:37 ----D---- C:\windows\inf
2013-12-02 22:11:10 ----SHD---- C:\windows\Installer
2013-12-02 22:11:04 ----D---- C:\windows\system32\Tasks
2013-12-02 22:11:01 ----D---- C:\windows\Prefetch
2013-12-02 22:10:26 ----D---- C:\windows\system32\drivers
2013-12-02 22:09:24 ----HD---- C:\ProgramData
2013-12-02 22:08:44 ----RD---- C:\Program Files (x86)
2013-12-02 22:08:02 ----D---- C:\windows\SysWOW64
2013-12-02 20:55:35 ----D---- C:\windows\system32\config
2013-12-02 20:46:49 ----D---- C:\windows\Tasks
2013-12-02 20:45:53 ----D---- C:\ProgramData\VeriFace
2013-11-30 23:59:49 ----D---- C:\windows\system32\wdi
2013-11-26 19:40:27 ----RSD---- C:\windows\assembly
2013-11-26 19:40:27 ----D---- C:\windows\Microsoft.NET
2013-11-25 09:38:42 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-11-25 09:38:42 ----D---- C:\windows\system32\cs-CZ
2013-11-25 09:33:57 ----D---- C:\windows\SYSWOW64\en-US
2013-11-25 09:33:57 ----D---- C:\windows\system32\en-US
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot2
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot
2013-11-24 19:41:28 ----D---- C:\windows\winsxs
2013-11-22 03:53:33 ----D---- C:\windows\rescache
2013-11-22 03:03:32 ----D---- C:\Program Files\Common Files\System
2013-11-22 03:03:32 ----A---- C:\windows\win.ini
2013-11-20 18:52:06 ----D---- C:\Program Files\Internet Explorer
2013-11-20 18:52:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\wbem
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\sk-SK
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\migration
2013-11-20 18:52:03 ----D---- C:\windows\system32\wbem
2013-11-20 18:52:03 ----D---- C:\windows\system32\sk-SK
2013-11-20 18:52:03 ----D---- C:\windows\system32\migration
2013-11-20 18:52:03 ----D---- C:\windows\PolicyDefinitions
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-TW
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-HK
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\tr-TR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\sv-SE
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-PT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-BR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pl-PL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\nl-NL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\ko-KR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\it-IT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\hu-HU
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fr-FR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fi-FI
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\es-ES
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\el-GR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\de-DE
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\zh-CN
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ru-RU
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\nb-NO
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ja-JP
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\da-DK
2013-11-20 18:51:58 ----D---- C:\windows\system32\zh-HK
2013-11-20 18:51:58 ----D---- C:\windows\system32\tr-TR
2013-11-20 18:51:58 ----D---- C:\windows\system32\sv-SE
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-PT
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-BR
2013-11-20 18:51:58 ----D---- C:\windows\system32\pl-PL
2013-11-20 18:51:58 ----D---- C:\windows\system32\nl-NL
2013-11-20 18:51:58 ----D---- C:\windows\system32\ko-KR
2013-11-20 18:51:58 ----D---- C:\windows\system32\it-IT
2013-11-20 18:51:58 ----D---- C:\windows\system32\hu-HU
2013-11-20 18:51:58 ----D---- C:\windows\system32\fr-FR
2013-11-20 18:51:58 ----D---- C:\windows\system32\fi-FI
2013-11-20 18:51:58 ----D---- C:\windows\system32\es-ES
2013-11-20 18:51:58 ----D---- C:\windows\system32\el-GR
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-TW
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-CN
2013-11-20 18:51:57 ----D---- C:\windows\system32\ru-RU
2013-11-20 18:51:57 ----D---- C:\windows\system32\nb-NO
2013-11-20 18:51:57 ----D---- C:\windows\system32\ja-JP
2013-11-20 18:51:57 ----D---- C:\windows\system32\de-DE
2013-11-20 18:51:57 ----D---- C:\windows\system32\da-DK
2013-11-20 18:51:51 ----RSD---- C:\windows\Fonts
2013-11-20 18:51:51 ----D---- C:\Program Files\Windows Journal
2013-11-20 18:51:40 ----D---- C:\windows\system32\DriverStore
2013-11-20 10:22:27 ----D---- C:\windows\Logs
2013-11-18 19:58:50 ----D---- C:\windows\ehome
2013-11-18 19:58:50 ----D---- C:\windows\AppPatch
2013-11-18 19:58:49 ----D---- C:\windows\system32\drivers\cs-CZ
2013-11-18 19:58:49 ----D---- C:\Program Files\Windows Defender
2013-11-18 19:58:49 ----D---- C:\Program Files (x86)\Windows Defender
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Sidebar
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Media Player
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Mail
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\winrm
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\slmgr
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\migwiz
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\en
2013-11-18 19:58:26 ----D---- C:\windows\servicing
2013-11-18 19:58:26 ----D---- C:\Program Files\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Media Player
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Mail
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers\en-US
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\WCN
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\DriverStore
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\Dism
2013-11-18 19:58:16 ----D---- C:\windows\SYSWOW64\Printing_Admin_Scripts
2013-11-18 19:58:16 ----D---- C:\windows\en-US
2013-11-18 19:58:15 ----D---- C:\windows\system32\winrm
2013-11-18 19:58:15 ----D---- C:\windows\system32\sysprep
2013-11-18 19:58:15 ----D---- C:\windows\system32\slmgr
2013-11-18 19:58:15 ----D---- C:\windows\system32\oobe
2013-11-18 19:58:15 ----D---- C:\windows\system32\migwiz
2013-11-18 19:58:15 ----D---- C:\windows\system32\en
2013-11-18 19:58:15 ----D---- C:\windows\system32\Boot
2013-11-18 19:58:05 ----D---- C:\windows\system32\WCN
2013-11-18 19:58:05 ----D---- C:\windows\system32\drivers\en-US
2013-11-18 19:58:05 ----D---- C:\windows\system32\Dism
2013-11-18 19:58:03 ----D---- C:\windows\system32\Printing_Admin_Scripts
2013-11-18 19:57:53 ----D---- C:\Program Files\DVD Maker
2013-11-18 19:57:37 ----D---- C:\windows\Speech
2013-11-14 11:51:23 ----D---- C:\Program Files (x86)\McAfee
2013-11-14 00:36:10 ----D---- C:\ProgramData\McAfee
2013-11-14 00:36:10 ----D---- C:\Program Files\Common Files
2013-11-14 00:36:03 ----D---- C:\Program Files (x86)\Common Files
2013-11-12 16:05:04 ----D---- C:\windows\SoftwareDistribution
2013-11-12 15:17:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-12 15:17:29 ----D---- C:\Program Files (x86)\Lenovo
2013-11-12 15:03:32 ----D---- C:\windows\ShellNew
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-12 15:02:41 ----D---- C:\Program Files (x86)\MSBuild
2013-11-12 15:02:26 ----SD---- C:\ProgramData\Microsoft
2013-11-12 14:59:02 ----D---- C:\Program Files (x86)\Microsoft Office
2013-11-12 14:58:03 ----D---- C:\windows\system32\restore
2013-11-12 10:05:44 ----D---- C:\windows\debug
2013-11-12 10:05:39 ----D---- C:\windows\system32\LogFiles
2013-11-12 10:04:58 ----D---- C:\windows\Panther
2013-11-12 09:08:23 ----RD---- C:\Users
2013-11-11 05:50:16 ----N---- C:\windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-10-24 194872]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-10-31 294712]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-10-01 123704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-09-10 31544]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2012-01-14 57952]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2012-01-14 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2013-11-05 150808]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-04 240920]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-10-31 212280]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2012-01-14 13408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2012-01-14 29792]
R3 amdiox64;AMD IO Driver; C:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-12-15 10208256]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-12-15 317952]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-01-13 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-01-13 106536]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2011-01-13 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-01-13 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-01-13 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-04-26 2852200]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\windows\system32\DRIVERS\netr28x.sys [2011-04-21 1360960]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-11-30 307304]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-05-31 333928]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-12-22 1407024]
R3 usbfilter;AMD USB Filter Driver; C:\windows\system32\DRIVERS\usbfilter.sys [2011-08-17 53376]
R3 vm331avs;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2011-04-26 250752]
R3 vmuvcflt;Vimicro USB Camera Filter; C:\windows\System32\Drivers\vmuvcflt.sys [2010-08-16 8320]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-12-15 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-12-15 361984]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-01-13 956192]
R2 RaMediaServer;Ralink UPnP Media Server; C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [2010-05-19 454656]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-30 566696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe []
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-01-14 182768]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2012-01-14 332272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-11-22 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
-----------------EOF-----------------
2013-12-02 23:17:44 ----RD---- C:\Program Files
2013-12-02 23:10:49 ----D---- C:\windows\Temp
2013-12-02 22:51:05 ----D---- C:\Windows
2013-12-02 22:24:37 ----D---- C:\windows\System32
2013-12-02 22:24:37 ----D---- C:\windows\inf
2013-12-02 22:11:10 ----SHD---- C:\windows\Installer
2013-12-02 22:11:04 ----D---- C:\windows\system32\Tasks
2013-12-02 22:11:01 ----D---- C:\windows\Prefetch
2013-12-02 22:10:26 ----D---- C:\windows\system32\drivers
2013-12-02 22:09:24 ----HD---- C:\ProgramData
2013-12-02 22:08:44 ----RD---- C:\Program Files (x86)
2013-12-02 22:08:02 ----D---- C:\windows\SysWOW64
2013-12-02 20:55:35 ----D---- C:\windows\system32\config
2013-12-02 20:46:49 ----D---- C:\windows\Tasks
2013-12-02 20:45:53 ----D---- C:\ProgramData\VeriFace
2013-11-30 23:59:49 ----D---- C:\windows\system32\wdi
2013-11-26 19:40:27 ----RSD---- C:\windows\assembly
2013-11-26 19:40:27 ----D---- C:\windows\Microsoft.NET
2013-11-25 09:38:42 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-11-25 09:38:42 ----D---- C:\windows\system32\cs-CZ
2013-11-25 09:33:57 ----D---- C:\windows\SYSWOW64\en-US
2013-11-25 09:33:57 ----D---- C:\windows\system32\en-US
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot2
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot
2013-11-24 19:41:28 ----D---- C:\windows\winsxs
2013-11-22 03:53:33 ----D---- C:\windows\rescache
2013-11-22 03:03:32 ----D---- C:\Program Files\Common Files\System
2013-11-22 03:03:32 ----A---- C:\windows\win.ini
2013-11-20 18:52:06 ----D---- C:\Program Files\Internet Explorer
2013-11-20 18:52:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\wbem
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\sk-SK
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\migration
2013-11-20 18:52:03 ----D---- C:\windows\system32\wbem
2013-11-20 18:52:03 ----D---- C:\windows\system32\sk-SK
2013-11-20 18:52:03 ----D---- C:\windows\system32\migration
2013-11-20 18:52:03 ----D---- C:\windows\PolicyDefinitions
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-TW
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-HK
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\tr-TR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\sv-SE
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-PT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-BR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pl-PL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\nl-NL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\ko-KR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\it-IT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\hu-HU
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fr-FR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fi-FI
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\es-ES
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\el-GR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\de-DE
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\zh-CN
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ru-RU
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\nb-NO
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ja-JP
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\da-DK
2013-11-20 18:51:58 ----D---- C:\windows\system32\zh-HK
2013-11-20 18:51:58 ----D---- C:\windows\system32\tr-TR
2013-11-20 18:51:58 ----D---- C:\windows\system32\sv-SE
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-PT
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-BR
2013-11-20 18:51:58 ----D---- C:\windows\system32\pl-PL
2013-11-20 18:51:58 ----D---- C:\windows\system32\nl-NL
2013-11-20 18:51:58 ----D---- C:\windows\system32\ko-KR
2013-11-20 18:51:58 ----D---- C:\windows\system32\it-IT
2013-11-20 18:51:58 ----D---- C:\windows\system32\hu-HU
2013-11-20 18:51:58 ----D---- C:\windows\system32\fr-FR
2013-11-20 18:51:58 ----D---- C:\windows\system32\fi-FI
2013-11-20 18:51:58 ----D---- C:\windows\system32\es-ES
2013-11-20 18:51:58 ----D---- C:\windows\system32\el-GR
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-TW
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-CN
2013-11-20 18:51:57 ----D---- C:\windows\system32\ru-RU
2013-11-20 18:51:57 ----D---- C:\windows\system32\nb-NO
2013-11-20 18:51:57 ----D---- C:\windows\system32\ja-JP
2013-11-20 18:51:57 ----D---- C:\windows\system32\de-DE
2013-11-20 18:51:57 ----D---- C:\windows\system32\da-DK
2013-11-20 18:51:51 ----RSD---- C:\windows\Fonts
2013-11-20 18:51:51 ----D---- C:\Program Files\Windows Journal
2013-11-20 18:51:40 ----D---- C:\windows\system32\DriverStore
2013-11-20 10:22:27 ----D---- C:\windows\Logs
2013-11-18 19:58:50 ----D---- C:\windows\ehome
2013-11-18 19:58:50 ----D---- C:\windows\AppPatch
2013-11-18 19:58:49 ----D---- C:\windows\system32\drivers\cs-CZ
2013-11-18 19:58:49 ----D---- C:\Program Files\Windows Defender
2013-11-18 19:58:49 ----D---- C:\Program Files (x86)\Windows Defender
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Sidebar
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Media Player
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Mail
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\winrm
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\slmgr
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\migwiz
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\en
2013-11-18 19:58:26 ----D---- C:\windows\servicing
2013-11-18 19:58:26 ----D---- C:\Program Files\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Media Player
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Mail
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers\en-US
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\WCN
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\DriverStore
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\Dism
2013-11-18 19:58:16 ----D---- C:\windows\SYSWOW64\Printing_Admin_Scripts
2013-11-18 19:58:16 ----D---- C:\windows\en-US
2013-11-18 19:58:15 ----D---- C:\windows\system32\winrm
2013-11-18 19:58:15 ----D---- C:\windows\system32\sysprep
2013-11-18 19:58:15 ----D---- C:\windows\system32\slmgr
2013-11-18 19:58:15 ----D---- C:\windows\system32\oobe
2013-11-18 19:58:15 ----D---- C:\windows\system32\migwiz
2013-11-18 19:58:15 ----D---- C:\windows\system32\en
2013-11-18 19:58:15 ----D---- C:\windows\system32\Boot
2013-11-18 19:58:05 ----D---- C:\windows\system32\WCN
2013-11-18 19:58:05 ----D---- C:\windows\system32\drivers\en-US
2013-11-18 19:58:05 ----D---- C:\windows\system32\Dism
2013-11-18 19:58:03 ----D---- C:\windows\system32\Printing_Admin_Scripts
2013-11-18 19:57:53 ----D---- C:\Program Files\DVD Maker
2013-11-18 19:57:37 ----D---- C:\windows\Speech
2013-11-14 11:51:23 ----D---- C:\Program Files (x86)\McAfee
2013-11-14 00:36:10 ----D---- C:\ProgramData\McAfee
2013-11-14 00:36:10 ----D---- C:\Program Files\Common Files
2013-11-14 00:36:03 ----D---- C:\Program Files (x86)\Common Files
2013-11-12 16:05:04 ----D---- C:\windows\SoftwareDistribution
2013-11-12 15:17:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-12 15:17:29 ----D---- C:\Program Files (x86)\Lenovo
2013-11-12 15:03:32 ----D---- C:\windows\ShellNew
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-12 15:02:41 ----D---- C:\Program Files (x86)\MSBuild
2013-11-12 15:02:26 ----SD---- C:\ProgramData\Microsoft
2013-11-12 14:59:02 ----D---- C:\Program Files (x86)\Microsoft Office
2013-11-12 14:58:03 ----D---- C:\windows\system32\restore
2013-11-12 10:05:44 ----D---- C:\windows\debug
2013-11-12 10:05:39 ----D---- C:\windows\system32\LogFiles
2013-11-12 10:04:58 ----D---- C:\windows\Panther
2013-11-12 09:08:23 ----RD---- C:\Users
2013-11-11 05:50:16 ----N---- C:\windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-10-24 194872]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-10-31 294712]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-10-01 123704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-09-10 31544]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2012-01-14 57952]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2012-01-14 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2013-11-05 150808]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-04 240920]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-10-31 212280]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2012-01-14 13408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2012-01-14 29792]
R3 amdiox64;AMD IO Driver; C:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-12-15 10208256]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-12-15 317952]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-01-13 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-01-13 106536]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2011-01-13 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-01-13 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-01-13 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-04-26 2852200]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\windows\system32\DRIVERS\netr28x.sys [2011-04-21 1360960]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-11-30 307304]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-05-31 333928]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-12-22 1407024]
R3 usbfilter;AMD USB Filter Driver; C:\windows\system32\DRIVERS\usbfilter.sys [2011-08-17 53376]
R3 vm331avs;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2011-04-26 250752]
R3 vmuvcflt;Vimicro USB Camera Filter; C:\windows\System32\Drivers\vmuvcflt.sys [2010-08-16 8320]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-12-15 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-12-15 361984]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-01-13 956192]
R2 RaMediaServer;Ralink UPnP Media Server; C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [2010-05-19 454656]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-30 566696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe []
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-01-14 182768]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2012-01-14 332272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-11-22 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
-----------------EOF-----------------
Re: Help: ''uzamknutá'' flashka
Bordelu mate ale v PC jeste hoooodne 
Dejte mi log z USBFixu Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com
- Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe
Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe
Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe
Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe - Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
- Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
- RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
- Na plose vznikne log Rkill.txt ten mi sem vlozte
- Ted nerestartujte PC - prisli byste o ucinek RKillu
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
- Pokud mate Win XP spustte pod uctem Spravce\Administratora
- Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
- Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
- Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
- Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
- Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
- Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
- Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Help: ''uzamknutá'' flashka
hmm, sem před měsícem dělal reinstal 
log z usb fixu
############################## | UsbFix V 7.134 | [Deletion]
User: Kuba (Administrator) # KUBA-PC
Updated 06/09/2013 by El Desaparecido
Started at 23:20:14 | 02/12/2013
Website: http://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: eldesaparecido@sosvirus.net
PC: LENOVO (Sabine) (x64-based PC)
CPU: AMD A4-3300M APU with Radeon(tm) HD Graphics (1900)
RAM -> [Total : 3558 | Free : 1001]
BIOS: Phoenix BIOS SC-T v2.1
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16736
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 343 Gb (228 Mb free - 66%) [] # NTFS
D:\ -> Fixed drive # 108 Gb (56 Mb free - 52%) [Nový svazek] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 961 Mb (800 Mb free - 83%) [] # FAT
################## | El Desaparecido Section |
HKLM\SOFTWARE | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE\wow6432Node | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE\wow6432Node | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE\wow6432Node | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE\wow6432Node | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [BackgroundContainer] - "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Steam] - "C:\Program Files (x86)\Steam\steam.exe" -silent
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [USBDriveFresher] - C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [YYHNXP~1] - "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [yyhnxpveqe] - "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
################## | Stopped processes |
Stopped! C:\windows\system32\atiesrxx.exe (888)
Stopped! C:\windows\system32\atieclxx.exe (1080)
Stopped! C:\windows\System32\spoolsv.exe (1340)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1636)
Stopped! C:\windows\system32\taskhost.exe (1644)
Stopped! C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (1768)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (1808)
Stopped! C:\windows\system32\taskeng.exe (1936)
Stopped! C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe (1944)
Stopped! C:\windows\SysWOW64\Rundll32.exe (1992)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (2712)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2724)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2736)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe (2856)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (2864)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (2872)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3040)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe (2264)
Stopped! C:\Program Files (x86)\Steam\Steam.exe (2616)
Stopped! C:\windows\System32\WScript.exe (2648)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (2832)
Stopped! C:\Program Files (x86)\USB Camera\VM331_STI.EXE (928)
Stopped! C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (1736)
Stopped! C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (2472)
Stopped! C:\windows\system32\SearchIndexer.exe (204)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (3088)
Stopped! C:\windows\SysWOW64\RunDll32.exe (2500)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe (3220)
Stopped! C:\windows\system32\DllHost.exe (3184)
Stopped! C:\Program Files (x86)\Common Files\Steam\SteamService.exe (4088)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe (3804)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (1980)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (4212)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (5392)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (5480)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (6092)
Stopped! C:\windows\System32\WScript.exe (5868)
Stopped! C:\windows\system32\wuauclt.exe (5788)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1300)
Stopped! C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe (5924)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1796)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (4428)
Stopped! C:\Program Files\Windows Sidebar\sidebar.exe (6000)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgui.exe (8596)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3800)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5400)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4116)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3000)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8584)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4876)
Stopped! C:\windows\System32\WUDFHost.exe (4676)
Stopped! C:\windows\system32\taskeng.exe (7740)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6628)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8860)
Stopped! C:\windows\system32\NOTEPAD.EXE (2196)
Stopped! C:\windows\system32\NOTEPAD.EXE (4288)
################## | Files # Infected Folders |
Not deleted ! G:\yyhnxpveqe.vbs
Deleted ! C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
Deleted ! G:\Sandra Maria Magdalena [mp3s.lnk
Deleted ! G:\Initial D - Mega Mix (HD).lnk
Deleted ! G:\.lnk
Deleted ! G:\yyhnxpveqe.lnk
Deleted ! G:\HPSCANS.lnk
Deleted ! C:\Users\Kuba\AppData\Local\Temp\a.exe
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|yyhnxpveqe
################## | Mountpoints2 |
################## | Listing |
[02/12/2013 - 22:09:25 | D ] C:\$AVG
[12/11/2013 - 09:10:58 | SHD ] C:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] C:\autorun.inf
[14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings
[13/11/2013 - 13:18:34 | N | 9] C:\END
[02/12/2013 - 22:14:31 | N | 135957] C:\FaceProv.log
[14/01/2012 - 15:48:14 | N | 102] C:\FactoryLog.txt
[02/12/2013 - 20:45:06 | ASH | 2798211072] C:\hiberfil.sys
[14/01/2012 - 07:21:04 | N | 64] C:\Lenovo EE Boot Optimizer.log
[14/01/2012 - 07:02:43 | D ] C:\LOGFILE
[12/11/2013 - 14:58:29 | RHD ] C:\MSOCache
[02/12/2013 - 20:45:09 | ASH | 3730948096] C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] C:\PerfLogs
[02/12/2013 - 23:17:44 | D ] C:\Program Files
[02/12/2013 - 22:08:44 | D ] C:\Program Files (x86)
[02/12/2013 - 22:09:24 | HD ] C:\ProgramData
[12/11/2013 - 09:06:48 | SHD ] C:\Recovery
[14/01/2012 - 06:55:12 | N | 2150] C:\RHDSetup.log
[02/12/2013 - 23:17:55 | D ] C:\rsit
[02/12/2013 - 22:09:00 | SHD ] C:\System Volume Information
[02/12/2013 - 23:23:13 | D ] C:\UsbFix
[02/12/2013 - 23:23:34 | A | 9852] C:\UsbFix [Clean 1] KUBA-PC.txt
[14/01/2012 - 07:37:30 | D ] C:\UserGuidePDF
[12/11/2013 - 09:08:23 | D ] C:\Users
[02/12/2013 - 22:51:05 | D ] C:\Windows
[12/11/2013 - 09:10:58 | SHD ] D:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] D:\autorun.inf
[11/11/2013 - 21:27:52 | D ] D:\KUBA-PC
[11/11/2013 - 21:26:27 | N | 528] D:\MediaID.bin
[12/11/2013 - 09:06:01 | SHD ] D:\System Volume Information
[27/11/2013 - 17:30:08 | N | 20135936] G:\.HPIMAGE.VFS
[27/11/2013 - 17:31:52 | D ] G:\HPSCANS
[25/11/2013 - 18:05:34 | N | 5701695] G:\Sandra Maria Magdalena [mp3s.nadruhou.net].mp3
[27/11/2013 - 20:01:14 | N | 77905] G:\yyhnxpveqe.vbs
[26/11/2013 - 18:28:06 | N | 140106919] G:\Initial D - Mega Mix (HD).mp3
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F | http://www.sosvirus.net |
log z usb fixu
############################## | UsbFix V 7.134 | [Deletion]
User: Kuba (Administrator) # KUBA-PC
Updated 06/09/2013 by El Desaparecido
Started at 23:20:14 | 02/12/2013
Website: http://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: eldesaparecido@sosvirus.net
PC: LENOVO (Sabine) (x64-based PC)
CPU: AMD A4-3300M APU with Radeon(tm) HD Graphics (1900)
RAM -> [Total : 3558 | Free : 1001]
BIOS: Phoenix BIOS SC-T v2.1
BOOT: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16736
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Fixed drive # 343 Gb (228 Mb free - 66%) [] # NTFS
D:\ -> Fixed drive # 108 Gb (56 Mb free - 52%) [Nový svazek] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 961 Mb (800 Mb free - 83%) [] # FAT
################## | El Desaparecido Section |
HKLM\SOFTWARE | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE\wow6432Node | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE\wow6432Node | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE\wow6432Node | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE\wow6432Node | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [BackgroundContainer] - "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Steam] - "C:\Program Files (x86)\Steam\steam.exe" -silent
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [USBDriveFresher] - C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [YYHNXP~1] - "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [yyhnxpveqe] - "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
################## | Stopped processes |
Stopped! C:\windows\system32\atiesrxx.exe (888)
Stopped! C:\windows\system32\atieclxx.exe (1080)
Stopped! C:\windows\System32\spoolsv.exe (1340)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1636)
Stopped! C:\windows\system32\taskhost.exe (1644)
Stopped! C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (1768)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (1808)
Stopped! C:\windows\system32\taskeng.exe (1936)
Stopped! C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe (1944)
Stopped! C:\windows\SysWOW64\Rundll32.exe (1992)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (2712)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2724)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2736)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe (2856)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (2864)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (2872)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3040)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe (2264)
Stopped! C:\Program Files (x86)\Steam\Steam.exe (2616)
Stopped! C:\windows\System32\WScript.exe (2648)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (2832)
Stopped! C:\Program Files (x86)\USB Camera\VM331_STI.EXE (928)
Stopped! C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (1736)
Stopped! C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (2472)
Stopped! C:\windows\system32\SearchIndexer.exe (204)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (3088)
Stopped! C:\windows\SysWOW64\RunDll32.exe (2500)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe (3220)
Stopped! C:\windows\system32\DllHost.exe (3184)
Stopped! C:\Program Files (x86)\Common Files\Steam\SteamService.exe (4088)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe (3804)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (1980)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (4212)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (5392)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (5480)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (6092)
Stopped! C:\windows\System32\WScript.exe (5868)
Stopped! C:\windows\system32\wuauclt.exe (5788)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1300)
Stopped! C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe (5924)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1796)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (4428)
Stopped! C:\Program Files\Windows Sidebar\sidebar.exe (6000)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgui.exe (8596)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3800)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5400)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4116)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3000)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8584)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4876)
Stopped! C:\windows\System32\WUDFHost.exe (4676)
Stopped! C:\windows\system32\taskeng.exe (7740)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6628)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8860)
Stopped! C:\windows\system32\NOTEPAD.EXE (2196)
Stopped! C:\windows\system32\NOTEPAD.EXE (4288)
################## | Files # Infected Folders |
Not deleted ! G:\yyhnxpveqe.vbs
Deleted ! C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
Deleted ! G:\Sandra Maria Magdalena [mp3s.lnk
Deleted ! G:\Initial D - Mega Mix (HD).lnk
Deleted ! G:\.lnk
Deleted ! G:\yyhnxpveqe.lnk
Deleted ! G:\HPSCANS.lnk
Deleted ! C:\Users\Kuba\AppData\Local\Temp\a.exe
(!) Temporary files deleted.
################## | Registry |
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|yyhnxpveqe
################## | Mountpoints2 |
################## | Listing |
[02/12/2013 - 22:09:25 | D ] C:\$AVG
[12/11/2013 - 09:10:58 | SHD ] C:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] C:\autorun.inf
[14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings
[13/11/2013 - 13:18:34 | N | 9] C:\END
[02/12/2013 - 22:14:31 | N | 135957] C:\FaceProv.log
[14/01/2012 - 15:48:14 | N | 102] C:\FactoryLog.txt
[02/12/2013 - 20:45:06 | ASH | 2798211072] C:\hiberfil.sys
[14/01/2012 - 07:21:04 | N | 64] C:\Lenovo EE Boot Optimizer.log
[14/01/2012 - 07:02:43 | D ] C:\LOGFILE
[12/11/2013 - 14:58:29 | RHD ] C:\MSOCache
[02/12/2013 - 20:45:09 | ASH | 3730948096] C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] C:\PerfLogs
[02/12/2013 - 23:17:44 | D ] C:\Program Files
[02/12/2013 - 22:08:44 | D ] C:\Program Files (x86)
[02/12/2013 - 22:09:24 | HD ] C:\ProgramData
[12/11/2013 - 09:06:48 | SHD ] C:\Recovery
[14/01/2012 - 06:55:12 | N | 2150] C:\RHDSetup.log
[02/12/2013 - 23:17:55 | D ] C:\rsit
[02/12/2013 - 22:09:00 | SHD ] C:\System Volume Information
[02/12/2013 - 23:23:13 | D ] C:\UsbFix
[02/12/2013 - 23:23:34 | A | 9852] C:\UsbFix [Clean 1] KUBA-PC.txt
[14/01/2012 - 07:37:30 | D ] C:\UserGuidePDF
[12/11/2013 - 09:08:23 | D ] C:\Users
[02/12/2013 - 22:51:05 | D ] C:\Windows
[12/11/2013 - 09:10:58 | SHD ] D:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] D:\autorun.inf
[11/11/2013 - 21:27:52 | D ] D:\KUBA-PC
[11/11/2013 - 21:26:27 | N | 528] D:\MediaID.bin
[12/11/2013 - 09:06:01 | SHD ] D:\System Volume Information
[27/11/2013 - 17:30:08 | N | 20135936] G:\.HPIMAGE.VFS
[27/11/2013 - 17:31:52 | D ] G:\HPSCANS
[25/11/2013 - 18:05:34 | N | 5701695] G:\Sandra Maria Magdalena [mp3s.nadruhou.net].mp3
[27/11/2013 - 20:01:14 | N | 77905] G:\yyhnxpveqe.vbs
[26/11/2013 - 18:28:06 | N | 140106919] G:\Initial D - Mega Mix (HD).mp3
################## | Vaccin |
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F | http://www.sosvirus.net |
Re: Help: ''uzamknutá'' flashka
log z rkillu:
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 12/03/2013 09:05:33 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 12/03/2013 09:05:44 PM
Execution time: 0 hours(s), 0 minute(s), and 10 seconds(s)
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 12/03/2013 09:05:33 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
Checking Windows Service Integrity:
* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 12/03/2013 09:05:44 PM
Execution time: 0 hours(s), 0 minute(s), and 10 seconds(s)
Re: Help: ''uzamknutá'' flashka
Pokracujte ComboFixem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Help: ''uzamknutá'' flashka
combofix, chvíli to trvalo: jen dodam že sem včera nainstaloval antivir tak možná tam toho sajrajtu bude min
ComboFix 13-12-01.01 - Kuba 03.12.2013 21:13:51.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3558.2352 [GMT 1:00]
Spuštěný z: c:\users\Kuba\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Kuba\AppData\Local\Microsoft\Windows\Temporary Internet Files\{02144931-1B3F-4386-A397-E2A6BF977BA6}.xps
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-03 do 2013-12-03 )))))))))))))))))))))))))))))))
.
.
2013-12-03 20:20 . 2013-12-03 20:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-02 22:19 . 2013-12-02 22:23 -------- d-----w- C:\UsbFix
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- C:\rsit
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- c:\program files\trend micro
2013-12-02 21:09 . 2013-12-02 21:09 -------- d-----w- C:\$AVG
2013-12-02 21:09 . 2013-12-02 21:13 -------- d-----w- c:\programdata\AVG2014
2013-12-02 21:08 . 2013-12-02 21:08 -------- d-----w- c:\program files (x86)\AVG
2013-12-02 21:01 . 2013-12-03 17:31 -------- d-----w- c:\programdata\MFAData
2013-12-02 21:01 . 2013-12-02 21:01 -------- d--h--w- c:\programdata\Common Files
2013-12-02 20:59 . 2013-12-03 11:52 5106 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\programdata\IsolatedStorage
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\program files (x86)\USBDriveFresher
2013-11-30 16:10 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2CAAAB1E-BA23-48D9-8F33-4D82A3C238B7}\mpengine.dll
2013-11-25 20:58 . 2013-11-25 20:58 -------- d-----w- c:\program files (x86)\Bitcoin
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\SysWow64\Wat
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\system32\Wat
2013-11-21 07:16 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-11-21 07:16 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-11-20 09:01 . 2013-11-20 09:01 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 09:00 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2013-11-20 09:00 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2013-11-20 08:36 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 08:36 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 08:36 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-19 15:26 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-19 15:26 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-19 15:26 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-19 15:26 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-19 15:26 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-19 15:26 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-19 15:26 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-19 09:14 . 2013-11-19 09:14 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2013-11-18 09:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-18 09:38 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files\Microsoft Silverlight
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-11-18 06:28 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-18 06:28 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-18 06:28 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-18 06:28 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-18 06:28 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-18 06:28 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-18 06:28 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-14 15:37 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll
2013-11-14 15:36 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll
2013-11-14 15:35 . 2013-07-19 01:58 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-14 15:34 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-11-14 15:33 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-11-14 15:32 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-11-14 15:31 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2013-11-14 15:30 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 15:29 . 2012-06-06 06:05 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-13 19:17 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-13 15:46 . 2013-11-13 16:53 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-13 15:46 . 2013-12-03 20:08 -------- d-----w- c:\program files (x86)\Steam
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Webteh
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\programdata\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\BS_Player_ControlBar
2013-11-12 15:04 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-12 14:56 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-12 14:56 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-12 14:56 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-12 14:56 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-12 14:56 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-12 14:56 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-12 14:56 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-12 14:56 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-12 14:56 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-12 14:03 . 2013-11-12 14:03 -------- d-----w- c:\program files\Common Files\DESIGNER
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-11-12 14:02 . 2013-11-25 08:33 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Sync Framework
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-11-12 14:00 . 2013-11-12 14:00 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Office
2013-11-12 13:58 . 2013-11-22 02:10 -------- d-----w- c:\programdata\Microsoft Help
2013-11-12 13:58 . 2013-11-12 13:58 -------- d-----r- C:\MSOCache
2013-11-12 10:11 . 2013-11-12 10:11 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-11-12 08:08 . 2013-11-13 15:46 -------- d-----w- c:\users\Kuba
2013-11-12 08:06 . 2013-11-12 08:06 -------- d-----w- C:\Recovery
2013-11-05 20:55 . 2013-11-05 20:55 150808 ----a-w- c:\windows\system32\drivers\avgdiska.sys
2013-11-04 20:52 . 2013-11-04 20:52 240920 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 09:21 . 2013-11-20 09:21 204800 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 09:21 . 2013-11-20 09:21 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-11-11 04:50 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-31 22:00 . 2013-10-31 22:00 212280 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2013-10-31 21:49 . 2013-10-31 21:49 294712 ----a-w- c:\windows\system32\drivers\avgloga.sys
2013-10-24 21:25 . 2013-10-24 21:25 194872 ----a-w- c:\windows\system32\drivers\avgidsha.sys
2013-09-30 23:52 . 2013-09-30 23:52 123704 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
2013-09-25 01:57 . 2013-11-14 15:38 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-09 23:43 . 2013-09-09 23:43 31544 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 433648 ----a-w- c:\programdata\Partner\Partner.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2013-11-06 16:53 226592 ----a-w- c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"="c:\users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll" [2013-11-06 319264]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-10-30 1820584]
"USBDriveFresher"="c:\program files (x86)\USBDriveFresher\USBDriveFresher.exe" [2011-08-29 3380224]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-15 343168]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2012-01-14 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-11-07 4956176]
.
c:\users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
564c81d66252657e082919bce2f72f30.exe [2013-11-10 357376]
a.exe [2013-11-10 357376]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2011-1-13 1138464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
R2 RaMediaServer;Ralink UPnP Media Server;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe;c:\programdata\Partner\Partner.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - AVGDISKA
*NewlyCreated* - AVGIDSDRIVER
*NewlyCreated* - AVGIDSHA
*NewlyCreated* - AVGLDX64
*NewlyCreated* - AVGLOGA
*NewlyCreated* - AVGMFX64
*NewlyCreated* - AVGRKX64
*NewlyCreated* - AVGTDIA
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-18 21:16 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 750064 ----a-w- c:\programdata\Partner\Partner64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-01-14 06:19 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-04-22 11831400]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2012-01-14 206176]
"OnekeyStudio"="c:\program files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" [2012-01-14 789920]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-01-14 9769888]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-01-14 5908928]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-RunOnce-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-12-03 21:23:54
ComboFix-quarantined-files.txt 2013-12-03 20:23
.
Před spuštěním: Volných bajtů: 240 622 284 800
Po spuštění: Volných bajtů: 240 242 282 496
.
- - End Of File - - 87BDFBAC271DC2BA590AE9E5EBE343AC
A36C5E4F47E84449FF07ED3517B43A31
ComboFix 13-12-01.01 - Kuba 03.12.2013 21:13:51.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3558.2352 [GMT 1:00]
Spuštěný z: c:\users\Kuba\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Kuba\AppData\Local\Microsoft\Windows\Temporary Internet Files\{02144931-1B3F-4386-A397-E2A6BF977BA6}.xps
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-03 do 2013-12-03 )))))))))))))))))))))))))))))))
.
.
2013-12-03 20:20 . 2013-12-03 20:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-02 22:19 . 2013-12-02 22:23 -------- d-----w- C:\UsbFix
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- C:\rsit
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- c:\program files\trend micro
2013-12-02 21:09 . 2013-12-02 21:09 -------- d-----w- C:\$AVG
2013-12-02 21:09 . 2013-12-02 21:13 -------- d-----w- c:\programdata\AVG2014
2013-12-02 21:08 . 2013-12-02 21:08 -------- d-----w- c:\program files (x86)\AVG
2013-12-02 21:01 . 2013-12-03 17:31 -------- d-----w- c:\programdata\MFAData
2013-12-02 21:01 . 2013-12-02 21:01 -------- d--h--w- c:\programdata\Common Files
2013-12-02 20:59 . 2013-12-03 11:52 5106 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\programdata\IsolatedStorage
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\program files (x86)\USBDriveFresher
2013-11-30 16:10 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2CAAAB1E-BA23-48D9-8F33-4D82A3C238B7}\mpengine.dll
2013-11-25 20:58 . 2013-11-25 20:58 -------- d-----w- c:\program files (x86)\Bitcoin
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\SysWow64\Wat
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\system32\Wat
2013-11-21 07:16 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-11-21 07:16 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-11-20 09:01 . 2013-11-20 09:01 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 09:00 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2013-11-20 09:00 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2013-11-20 08:36 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 08:36 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 08:36 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-19 15:26 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-19 15:26 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-19 15:26 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-19 15:26 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-19 15:26 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-19 15:26 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-19 15:26 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-19 09:14 . 2013-11-19 09:14 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2013-11-18 09:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-18 09:38 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files\Microsoft Silverlight
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-11-18 06:28 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-18 06:28 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-18 06:28 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-18 06:28 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-18 06:28 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-18 06:28 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-18 06:28 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-14 15:37 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll
2013-11-14 15:36 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll
2013-11-14 15:35 . 2013-07-19 01:58 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-14 15:34 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-11-14 15:33 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-11-14 15:32 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-11-14 15:31 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2013-11-14 15:30 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 15:29 . 2012-06-06 06:05 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-13 19:17 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-13 15:46 . 2013-11-13 16:53 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-13 15:46 . 2013-12-03 20:08 -------- d-----w- c:\program files (x86)\Steam
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Webteh
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\programdata\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\BS_Player_ControlBar
2013-11-12 15:04 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-12 14:56 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-12 14:56 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-12 14:56 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-12 14:56 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-12 14:56 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-12 14:56 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-12 14:56 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-12 14:56 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-12 14:56 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-12 14:03 . 2013-11-12 14:03 -------- d-----w- c:\program files\Common Files\DESIGNER
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-11-12 14:02 . 2013-11-25 08:33 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Sync Framework
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-11-12 14:00 . 2013-11-12 14:00 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Office
2013-11-12 13:58 . 2013-11-22 02:10 -------- d-----w- c:\programdata\Microsoft Help
2013-11-12 13:58 . 2013-11-12 13:58 -------- d-----r- C:\MSOCache
2013-11-12 10:11 . 2013-11-12 10:11 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-11-12 08:08 . 2013-11-13 15:46 -------- d-----w- c:\users\Kuba
2013-11-12 08:06 . 2013-11-12 08:06 -------- d-----w- C:\Recovery
2013-11-05 20:55 . 2013-11-05 20:55 150808 ----a-w- c:\windows\system32\drivers\avgdiska.sys
2013-11-04 20:52 . 2013-11-04 20:52 240920 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 09:21 . 2013-11-20 09:21 204800 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 09:21 . 2013-11-20 09:21 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-11-11 04:50 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-31 22:00 . 2013-10-31 22:00 212280 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2013-10-31 21:49 . 2013-10-31 21:49 294712 ----a-w- c:\windows\system32\drivers\avgloga.sys
2013-10-24 21:25 . 2013-10-24 21:25 194872 ----a-w- c:\windows\system32\drivers\avgidsha.sys
2013-09-30 23:52 . 2013-09-30 23:52 123704 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
2013-09-25 01:57 . 2013-11-14 15:38 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-09 23:43 . 2013-09-09 23:43 31544 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 433648 ----a-w- c:\programdata\Partner\Partner.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2013-11-06 16:53 226592 ----a-w- c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"="c:\users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll" [2013-11-06 319264]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-10-30 1820584]
"USBDriveFresher"="c:\program files (x86)\USBDriveFresher\USBDriveFresher.exe" [2011-08-29 3380224]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-15 343168]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2012-01-14 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-11-07 4956176]
.
c:\users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
564c81d66252657e082919bce2f72f30.exe [2013-11-10 357376]
a.exe [2013-11-10 357376]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2011-1-13 1138464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
R2 RaMediaServer;Ralink UPnP Media Server;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe;c:\programdata\Partner\Partner.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - AVGDISKA
*NewlyCreated* - AVGIDSDRIVER
*NewlyCreated* - AVGIDSHA
*NewlyCreated* - AVGLDX64
*NewlyCreated* - AVGLOGA
*NewlyCreated* - AVGMFX64
*NewlyCreated* - AVGRKX64
*NewlyCreated* - AVGTDIA
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-18 21:16 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 750064 ----a-w- c:\programdata\Partner\Partner64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-01-14 06:19 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-04-22 11831400]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2012-01-14 206176]
"OnekeyStudio"="c:\program files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" [2012-01-14 789920]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-01-14 9769888]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-01-14 5908928]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-RunOnce-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-12-03 21:23:54
ComboFix-quarantined-files.txt 2013-12-03 20:23
.
Před spuštěním: Volných bajtů: 240 622 284 800
Po spuštění: Volných bajtů: 240 242 282 496
.
- - End Of File - - 87BDFBAC271DC2BA590AE9E5EBE343AC
A36C5E4F47E84449FF07ED3517B43A31
Re: Help: ''uzamknutá'' flashka
Trvate na antiviru AVG - u nas neni moc obliben - vysoka zatez systemu, slabsi detekce 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Help: ''uzamknutá'' flashka
netrvám, měl jsem mcafee nebo jak se to píše, bohužel nebyl zdarma, víte o nějakém lepším antiviru zdarma?
Re: Help: ''uzamknutá'' flashka
Avg je spise parodie na antivir 
Odinstalujte Avg a pak pouzijte jeste http://download.avg.com/filedir/util/su ... 4_4116.exe Nainstalujte Avast Free http://www.avast.com/get/gWR5mo92 Dejte log z DDS http://forum.viry.cz/viewtopic.php?f=13&t=125171
Naposledy upravil(a) vyosek dne 04 Pro 2013 11:30, celkem upraveno 1 x.
Důvod: Uprave odkaz
Důvod: Uprave odkaz
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Help: ''uzamknutá'' flashka
mužu poprosit ještě link na tu utlitku k plnemu odstraneni avg? nemužu na ni kliknout, je tam slovo ''jeste'' součástí hypertextoveho odkazu. Díki 
edit: dobry už to mam
edit: dobry už to mam
Re: Help: ''uzamknutá'' flashka
Odkaz upraven 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?