Prosím o kontrolu logu mého ntb

Zpráva

zojdicek · #1 Příspěvek od **zojdicek** » 11 úno 2014 16:21

Dobrý den,

byl jsem mimo Čr a nechal jsem doma můj NBT bratrovy, když jsem přijel, tak ntb špatně reaguje, je obrovská doba, než se zapne ( načítání win třeba 4-5 min ), zničeho nic se zasekne a nereaguje ( nebo se objeví místo obrazovky fialová barva přes celý monitor ). Musel něco špatného asi stáhnout nebo nevím. Předtím jsem takové problémy neměl.

Zkontrolujte mi prosím log, jsem ztracen.

LOG Z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Dominik at 2014-02-11 13:35:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 136 GB (29%) free of 477 GB
Total RAM: 4095 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:35:16, on 11.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files (x86)\Razer\Abyssus\razerhid.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Razer\Abyssus\razertra.exe
C:\Program Files (x86)\Razer\Abyssus\razerofa.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Dominik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... 592-802341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Abyssus] C:\Program Files (x86)\Razer\Abyssus\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Dominik\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11487 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
taskeng.exe {D571E82D-724C-4CB8-8972-08CF9D80C496}
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\wbem\wmiprvse.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files\GamePark2\gpcl.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-12653350061649896509-1710154334-89233933417266288-16343101171498190022-2019347274
"C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe"
"C:\Program Files (x86)\Razer\Abyssus\razerhid.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Razer\Abyssus\razertra.exe"
"C:\Program Files (x86)\Razer\Abyssus\razerofa.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1232.0.996964023\134224861" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,13,23,28 --gpu-vendor-id=0x10de --gpu-device-id=0x0654 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3221 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="1232.9.778059425\1325361265" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="1232.10.515527219\357296736" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1232.11.1953032586\2121983470" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="1232.12.1099454438\203241166" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="1232.13.1215405993\1555101036" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/default/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-client-side-phishing-detection --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="1232.14.538891494\1491004851" /prefetch:673131151
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Dominik\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-07-30 617856]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-09-01 323584]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-08 4030008]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1840720]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2013-12-10 1100248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\Dominik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-03 138096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2012-10-07 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-11-06 3673728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-09-29 8123936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe [2013-12-11 1823656]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-10-09 6937216]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-19 170624]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-01-20 43848]
"SSBkgdUpdate"=C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"Abyssus"=C:\Program Files (x86)\Razer\Abyssus\razerhid.exe [2010-05-10 223744]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-01-20 152392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-02-11 13:35:01 ----D---- C:\rsit
2014-02-11 13:35:01 ----D---- C:\Program Files\trend micro
2014-02-10 23:05:10 ----D---- C:\Windows\SYSWOW64\Wat
2014-02-10 23:05:10 ----D---- C:\Windows\system32\Wat
2014-02-10 18:23:59 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-02-10 18:23:59 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-02-10 18:23:59 ----A---- C:\Windows\system32\wmploc.DLL
2014-02-10 18:23:57 ----A---- C:\Windows\system32\wmp.dll
2014-02-10 18:22:47 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-02-10 18:18:36 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-02-10 18:18:36 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\url.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-02-10 18:18:31 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\wininet.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\wextract.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\webcheck.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\vbscript.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\urlmon.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\url.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\pngfilt.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\occache.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\msrating.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\msls31.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\mshtmler.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\mshtmled.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\mshtml.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\mshta.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\msfeedssync.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\licmgr10.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\jsIntl.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\jscript9.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\jscript.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\inseng.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\imgutil.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iexpress.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieui.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iesysprep.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iesetup.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iertutil.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iernonce.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iepeers.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieframe.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\iedkcs32.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ieapfltr.dat
2014-02-10 18:18:31 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-10 18:18:31 ----A---- C:\Windows\system32\icardie.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\elshyph.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\dxtrans.dll
2014-02-10 18:18:31 ----A---- C:\Windows\system32\dxtmsft.dll
2014-02-10 18:14:01 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-02-10 18:14:01 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-02-10 18:14:00 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-02-10 18:14:00 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-02-10 18:13:59 ----A---- C:\Windows\system32\WUDFx.dll
2014-02-10 18:13:59 ----A---- C:\Windows\system32\WUDFHost.exe
2014-02-10 18:13:59 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-02-10 16:53:41 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-02-10 16:53:41 ----A---- C:\Windows\system32\msieftp.dll
2014-02-10 16:53:40 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-02-10 16:53:40 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-02-10 16:53:40 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-02-10 16:53:40 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-02-10 16:53:32 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-02-10 16:53:32 ----A---- C:\Windows\system32\WMPhoto.dll
2014-02-10 16:53:31 ----A---- C:\Windows\system32\wwansvc.dll
2014-02-10 16:53:31 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-02-10 16:53:23 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-02-10 16:53:10 ----A---- C:\Windows\system32\authui.dll
2014-02-10 16:53:09 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-02-10 16:53:09 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-02-10 16:53:09 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-02-10 16:53:09 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-10 16:53:09 ----A---- C:\Windows\system32\credui.dll
2014-02-10 16:52:50 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-02-10 16:52:50 ----A---- C:\Windows\system32\nlasvc.dll
2014-02-10 16:52:50 ----A---- C:\Windows\system32\netcorehc.dll
2014-02-10 16:52:50 ----A---- C:\Windows\system32\ncsi.dll
2014-02-10 16:52:50 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-02-10 16:52:49 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-02-10 16:52:49 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-02-10 16:52:49 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-02-10 16:52:49 ----A---- C:\Windows\system32\nlaapi.dll
2014-02-10 16:52:49 ----A---- C:\Windows\system32\netevent.dll
2014-02-10 16:52:49 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-02-10 16:52:35 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-02-10 16:52:35 ----A---- C:\Windows\system32\WebClnt.dll
2014-02-10 16:52:34 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-02-10 16:52:34 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-02-10 16:52:34 ----A---- C:\Windows\system32\davclnt.dll
2014-02-10 16:52:33 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-02-10 16:52:33 ----A---- C:\Windows\system32\usp10.dll
2014-02-10 16:52:30 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-02-10 16:52:30 ----A---- C:\Windows\system32\mswsock.dll
2014-02-10 16:52:15 ----A---- C:\Windows\system32\Wpc.dll
2014-02-10 16:52:15 ----A---- C:\Windows\system32\gameux.dll
2014-02-10 16:52:13 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-02-10 16:52:13 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-02-10 16:51:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-02-10 16:51:39 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-02-10 16:51:38 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-02-10 16:51:38 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-02-10 16:51:38 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-02-10 16:51:38 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-02-10 16:51:38 ----A---- C:\Windows\system32\wow64win.dll
2014-02-10 16:51:38 ----A---- C:\Windows\system32\wow64.dll
2014-02-10 16:51:38 ----A---- C:\Windows\system32\tdh.dll
2014-02-10 16:51:38 ----A---- C:\Windows\system32\ntdll.dll
2014-02-10 16:51:38 ----A---- C:\Windows\system32\advapi32.dll
2014-02-10 16:51:37 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-02-10 16:51:37 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-02-10 16:51:37 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-02-10 16:51:37 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-02-10 16:51:37 ----A---- C:\Windows\system32\ntvdm64.dll
2014-02-10 16:51:36 ----A---- C:\Windows\SYSWOW64\user.exe
2014-02-10 16:51:36 ----A---- C:\Windows\system32\wow64cpu.dll
2014-02-10 16:51:35 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-02-10 16:51:35 ----A---- C:\Windows\system32\drivers\netio.sys
2014-02-10 16:50:36 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-02-10 16:50:36 ----A---- C:\Windows\system32\cryptdlg.dll
2014-02-10 16:50:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-02-10 16:50:24 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-02-10 16:50:24 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-02-10 16:50:18 ----A---- C:\Windows\system32\scavengeui.dll
2014-02-10 16:25:32 ----D---- C:\ProgramData\McAfee Security Scan
2014-02-10 16:25:31 ----D---- C:\ProgramData\McAfee
2014-02-10 16:25:00 ----D---- C:\Program Files (x86)\McAfee Security Scan
2014-02-09 18:52:02 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2014-02-09 18:52:02 ----A---- C:\Windows\system32\nvspcap64.dll
2014-02-09 18:51:12 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-02-09 18:42:48 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-02-09 18:42:48 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-02-09 18:42:48 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-02-09 18:40:16 ----A---- C:\Windows\system32\nvhdap64.dll
2014-02-09 18:40:16 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2014-02-09 18:40:15 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-02-09 18:40:15 ----A---- C:\Windows\system32\nvapo64v.dll
2014-02-09 18:40:14 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-02-09 18:40:14 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-02-09 18:40:14 ----A---- C:\Windows\system32\nvopencl.dll
2014-02-09 18:40:14 ----A---- C:\Windows\system32\nvoglv64.dll
2014-02-09 18:40:14 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-02-09 18:40:13 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-02-09 18:40:13 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-02-09 18:40:13 ----A---- C:\Windows\system32\NvIFR64.dll
2014-02-09 18:40:13 ----A---- C:\Windows\system32\NvFBC64.dll
2014-02-09 18:40:13 ----A---- C:\Windows\system32\nvdispgenco6433221.dll
2014-02-09 18:40:13 ----A---- C:\Windows\system32\nvdispco6433221.dll
2014-02-09 18:40:12 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-02-09 18:40:12 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-02-09 18:40:12 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-02-09 18:40:12 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-02-09 18:40:12 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-02-09 18:40:12 ----A---- C:\Windows\system32\nvcuvid.dll
2014-02-09 18:40:12 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-02-09 18:40:12 ----A---- C:\Windows\system32\nvcuda.dll
2014-02-09 18:40:11 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-02-09 18:40:11 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-02-09 18:40:11 ----A---- C:\Windows\system32\nvcompiler.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23:12 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:23:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23:12 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23:12 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-02-05 03:23:12 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-02-05 03:23:12 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-02-05 03:23:12 ----A---- C:\Windows\system32\XpsPrint.dll
2014-02-05 03:23:12 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-02-05 03:23:12 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-02-05 03:23:02 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-02-05 03:23:02 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-02-05 03:23:02 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-02-05 03:23:02 ----A---- C:\Windows\system32\dxgi.dll
2014-02-05 03:23:02 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-05 03:23:02 ----A---- C:\Windows\system32\d2d1.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-02-05 03:23:01 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\FntCache.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\DWrite.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\d3d10level9.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\d3d10core.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\d3d10_1.dll
2014-02-05 03:23:01 ----A---- C:\Windows\system32\d3d10.dll
2014-02-05 03:23:00 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-02-05 03:23:00 ----A---- C:\Windows\system32\UIAnimation.dll
2014-02-05 03:06:37 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-02-05 03:06:37 ----A---- C:\Windows\system32\d3d11.dll
2014-02-04 20:54:16 ----A---- C:\Windows\system32\Wdfres.dll
2014-02-04 20:54:16 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-02-04 20:54:16 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-02-04 20:54:12 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-02-04 20:54:12 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-02-04 20:54:11 ----A---- C:\Windows\system32\gdi32.dll
2014-02-04 20:54:10 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-02-04 20:54:09 ----A---- C:\Windows\system32\drivers\afd.sys
2014-02-04 20:54:08 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-02-04 20:54:06 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-02-04 20:54:06 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-02-04 20:54:06 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-02-04 20:54:06 ----A---- C:\Windows\system32\wscript.exe
2014-02-04 20:54:06 ----A---- C:\Windows\system32\scrrun.dll
2014-02-04 20:54:06 ----A---- C:\Windows\system32\cscript.exe
2014-02-04 20:53:59 ----A---- C:\Windows\system32\crypt32.dll
2014-02-04 20:53:58 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-02-04 20:53:44 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-02-04 20:53:44 ----A---- C:\Windows\system32\tzres.dll
2014-02-04 20:53:36 ----A---- C:\Windows\system32\drivers\usbscan.sys
2014-02-04 20:53:36 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-02-04 20:53:36 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-02-04 20:53:35 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 20:53:35 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-02-04 20:53:35 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 20:53:35 ----A---- C:\Windows\system32\lpk.dll
2014-02-04 20:53:35 ----A---- C:\Windows\system32\dciman32.dll
2014-02-04 20:53:35 ----A---- C:\Windows\system32\atmfd.dll
2014-02-04 20:53:34 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-02-04 20:53:34 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-02-04 20:53:34 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-02-04 20:53:34 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-02-04 20:53:34 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-02-04 20:53:34 ----A---- C:\Windows\system32\fontsub.dll
2014-02-04 20:53:34 ----A---- C:\Windows\system32\comctl32.dll
2014-02-04 20:53:34 ----A---- C:\Windows\system32\atmlib.dll
2014-02-04 20:53:28 ----A---- C:\Windows\system32\win32k.sys
2014-02-04 20:53:27 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-02-04 20:53:27 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-02-04 20:53:26 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-02-04 20:53:26 ----A---- C:\Windows\system32\schannel.dll
2014-02-04 20:53:26 ----A---- C:\Windows\system32\drivers\cng.sys
2014-02-04 20:53:25 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-02-04 20:53:25 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-02-04 20:53:25 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\sspisrv.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\sspicli.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\secur32.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\ncrypt.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\lsass.exe
2014-02-04 20:53:25 ----A---- C:\Windows\system32\lsasrv.dll
2014-02-04 20:53:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-02-04 20:53:25 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-02-04 20:53:23 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-02-04 20:53:23 ----A---- C:\Windows\system32\imagehlp.dll
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-02-04 20:53:21 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-02-04 20:39:57 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-02-04 20:39:57 ----A---- C:\Windows\system32\nshwfp.dll
2014-02-04 20:39:57 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-02-04 20:39:57 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-02-04 20:39:56 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-01-23 21:27:02 ----D---- C:\Program Files\iPod
2014-01-23 21:26:59 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 21:26:59 ----D---- C:\Program Files\iTunes
2014-01-23 21:26:59 ----D---- C:\Program Files (x86)\iTunes

======List of files/folders modified in the last 1 month======

2014-02-11 13:35:13 ----D---- C:\Windows\Temp
2014-02-11 13:35:08 ----D---- C:\Users\Dominik\AppData\Roaming\vlc
2014-02-11 13:35:01 ----RD---- C:\Program Files
2014-02-11 13:30:10 ----D---- C:\Windows\system32\config
2014-02-11 13:30:05 ----D---- C:\Users\Dominik\AppData\Roaming\TS3Client
2014-02-11 12:39:47 ----D---- C:\Windows\system32\Tasks
2014-02-11 12:39:19 ----D---- C:\ProgramData\NVIDIA
2014-02-10 23:15:31 ----D---- C:\Windows\System32
2014-02-10 23:15:31 ----D---- C:\Windows\inf
2014-02-10 23:15:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-10 23:12:36 ----D---- C:\Windows\winsxs
2014-02-10 23:10:20 ----D---- C:\Windows\Panther
2014-02-10 23:06:18 ----D---- C:\Windows\SysWOW64
2014-02-10 23:06:18 ----D---- C:\Program Files\Windows Media Player
2014-02-10 23:06:18 ----D---- C:\Program Files (x86)\Windows Media Player
2014-02-10 23:06:16 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-10 23:06:16 ----D---- C:\Windows\system32\cs-CZ
2014-02-10 23:06:15 ----D---- C:\Program Files\Internet Explorer
2014-02-10 23:06:15 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-10 23:06:04 ----D---- C:\Windows\SYSWOW64\migration
2014-02-10 23:06:02 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-10 23:05:47 ----D---- C:\Windows\PolicyDefinitions
2014-02-10 23:05:44 ----D---- C:\Windows\system32\migration
2014-02-10 23:05:40 ----D---- C:\Windows\system32\en-US
2014-02-10 23:05:23 ----D---- C:\Windows\AppPatch
2014-02-10 23:05:21 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-02-10 23:05:10 ----D---- C:\Windows\system32\drivers
2014-02-10 23:04:55 ----RSD---- C:\Windows\Fonts
2014-02-10 23:04:50 ----D---- C:\Windows\system32\DriverStore
2014-02-10 23:04:21 ----A---- C:\Windows\system32\ServiceFilter.ini
2014-02-10 23:04:21 ----A---- C:\Windows\system32\AutoRunFilter.ini
2014-02-10 23:03:51 ----D---- C:\Windows
2014-02-10 18:24:19 ----D---- C:\Windows\system32\catroot
2014-02-10 18:22:47 ----D---- C:\Windows\Logs
2014-02-10 18:21:26 ----D---- C:\Windows\system32\catroot2
2014-02-10 18:15:59 ----D---- C:\Windows\Microsoft.NET
2014-02-10 18:15:56 ----RSD---- C:\Windows\assembly
2014-02-10 18:11:35 ----SHD---- C:\System Volume Information
2014-02-10 17:03:28 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-10 16:34:46 ----A---- C:\Users\Dominik\AppData\Roaming\Network Meter_Settings.ini
2014-02-10 16:25:32 ----HD---- C:\ProgramData
2014-02-10 16:25:00 ----RD---- C:\Program Files (x86)
2014-02-10 16:24:58 ----D---- C:\Windows\Tasks
2014-02-10 14:54:29 ----D---- C:\Program Files\CCleaner
2014-02-09 23:55:24 ----D---- C:\Users\Dominik\AppData\Roaming\Xfire
2014-02-09 18:53:41 ----D---- C:\ProgramData\NVIDIA Corporation
2014-02-09 18:52:02 ----D---- C:\Program Files\NVIDIA Corporation
2014-02-09 18:52:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-02-09 18:51:13 ----SHD---- C:\Windows\Installer
2014-02-09 18:51:13 ----SHD---- C:\Config.Msi
2014-02-09 18:42:58 ----RD---- C:\Users
2014-02-06 20:20:11 ----D---- C:\Program Files (x86)\Java
2014-02-06 16:48:56 ----D---- C:\Windows\Prefetch
2014-02-05 21:25:17 ----D---- C:\Users\Dominik\AppData\Roaming\Samsung
2014-02-05 21:25:04 ----D---- C:\Program Files (x86)\Samsung
2014-02-05 21:25:02 ----D---- C:\ProgramData\Samsung
2014-02-05 21:24:59 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-05 21:22:14 ----D---- C:\Users\Dominik\AppData\Roaming\DAEMON Tools Lite
2014-02-05 21:22:13 ----D---- C:\Program Files (x86)\Steam
2014-02-05 21:20:24 ----D---- C:\Windows\debug
2014-02-05 21:20:23 ----D---- C:\Windows\Minidump
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\it-IT
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-02-05 10:36:11 ----D---- C:\Windows\SYSWOW64\el-GR
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\es-ES
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\de-DE
2014-02-05 10:36:10 ----D---- C:\Windows\SYSWOW64\da-DK
2014-02-05 10:36:10 ----D---- C:\Windows\system32\pt-BR
2014-02-05 10:36:09 ----D---- C:\Windows\system32\zh-TW
2014-02-05 10:36:09 ----D---- C:\Windows\system32\zh-HK
2014-02-05 10:36:09 ----D---- C:\Windows\system32\zh-CN
2014-02-05 10:36:09 ----D---- C:\Windows\system32\tr-TR
2014-02-05 10:36:09 ----D---- C:\Windows\system32\sv-SE
2014-02-05 10:36:09 ----D---- C:\Windows\system32\ru-RU
2014-02-05 10:36:09 ----D---- C:\Windows\system32\pt-PT
2014-02-05 10:36:09 ----D---- C:\Windows\system32\pl-PL
2014-02-05 10:36:09 ----D---- C:\Windows\system32\nl-NL
2014-02-05 10:36:09 ----D---- C:\Windows\system32\ko-KR
2014-02-05 10:36:09 ----D---- C:\Windows\system32\ja-JP
2014-02-05 10:36:09 ----D---- C:\Windows\system32\it-IT
2014-02-05 10:36:09 ----D---- C:\Windows\system32\hu-HU
2014-02-05 10:36:09 ----D---- C:\Windows\system32\fr-FR
2014-02-05 10:36:09 ----D---- C:\Windows\system32\fi-FI
2014-02-05 10:36:09 ----D---- C:\Windows\system32\es-ES
2014-02-05 10:36:09 ----D---- C:\Windows\system32\el-GR
2014-02-05 10:36:09 ----D---- C:\Windows\system32\de-DE
2014-02-05 10:36:08 ----D---- C:\Windows\system32\nb-NO
2014-02-05 10:36:08 ----D---- C:\Windows\system32\da-DK
2014-02-05 10:36:05 ----D---- C:\Windows\system32\wbem
2014-02-05 02:46:25 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-04 21:02:42 ----D---- C:\Windows\system32\MRT
2014-02-02 13:04:17 ----D---- C:\ProgramData\Xfire
2014-01-27 20:25:53 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-01-23 21:14:58 ----D---- C:\ProgramData\Apple
2014-01-16 09:59:44 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2012-10-07 35384]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-08-06 408600]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-12-07 564824]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-05 283200]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2011-08-04 187632]
R3 Abyssus;Razer Abyssus; C:\Windows\system32\drivers\Abyssus.sys [2009-10-30 10880]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-07-09 140800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-09-29 2005024]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-09-04 62464]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-10-05 6952960]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 vhidmini;Razer Gaming Device; C:\Windows\system32\DRIVERS\vHidDev.sys [2009-12-21 7552]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-21 44032]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\SysWOW64\FsUsbExDisk.SYS [2013-03-20 37344]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 hipeer20;Remobo Instant Private Network; C:\Windows\system32\DRIVERS\remobo64.sys [2010-08-01 30720]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2013-02-22 169288]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2013-02-22 21320]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2013-02-22 188232]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2013-06-17 16152]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2009-02-13 14464]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-23 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-09-17 359552]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-07 94208]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-08 974944]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 101528]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-12-19 922912]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-01-05 75064]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-07 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-10 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-10 111616]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-09-05 234776]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-11-26 569768]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-02-10 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 11 úno 2014 16:46

Zdravim

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam, ze ten ESET jak ma byt = zakoupena licence

zojdicek · #3 Příspěvek od **zojdicek** » 11 úno 2014 16:51

Abych řekl pravdu, tak nevím, ta je tu z dob, kdy mi známý naposledy přeinstalovával Win ( cca rok - dva ). Od té doby jsem na se o to nestaral.

info.txt logfile of random's system information tool 1.09 2014-02-11 13:35:20

======Uninstall list======

-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {926CC8AE-8414-43DF-8EB4-CF26D9C3C663}
-->MsiExec /X{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}
Acrobat.com-->MsiExec.exe /X{77DCDCE3-2DED-62F3-8154-05E745472D07}
Adobe AIR-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 12 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_44_ActiveX.exe -maintain activex
Adobe Flash Player 12 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_44_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.02)-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AB0000000001}
Alcor Micro USB Card Reader-->C:\Program Files (x86)\InstallShield Installation Information\{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}\Setup.exe -runfromtemp -l0x0409
Apple Application Support-->MsiExec.exe /I{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
Apple Mobile Device Support-->MsiExec.exe /I{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
ASUS AI Recovery-->MsiExec.exe /I{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}
ASUS CopyProtect-->MsiExec.exe /I{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}
ASUS Data Security Manager-->MsiExec.exe /X{FA2092C5-7979-412D-A962-6485274AE1EE}
ASUS LifeFrame3-->MsiExec.exe /I{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
ASUS MultiFrame-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9D48531D-2135-49FC-BC29-ACCDA5396A76}\setup.exe" -l0x9
ASUS Power4Gear Hybrid-->MsiExec.exe /I{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}
ASUS Virtual Camera-->MsiExec.exe /I{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
ASUS_N_Series_Screensaver-->C:\Windows\system32\ASUS_N_Series_Screensaver.scr /u
ATK Generic Function Service-->C:\Program Files (x86)\InstallShield Installation Information\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}\setup.exe -runfromtemp -l0x0009 -removeonly
ATK Hotkey-->MsiExec.exe /I{7C05592D-424B-46CB-B505-E0013E8E75C9}
ATK Media-->MsiExec.exe /I{D1E5870E-E3E5-4475-98A6-ADD614524ADF}
ATKOSD2-->MsiExec.exe /I{3B05F2FB-745B-4012-ADF2-439F36B2E70B}
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
Borderlands 2-->"C:\Program Files (x86)\2K Games\Borderlands 2\unins000.exe"
Call of Duty(R) 2 Patch 1.3-->C:\Program Files (x86)\Activision\Call of Duty 2\Uninst_Call of Duty(R) 2 Patch 1.3.exe /U "C:\Program Files (x86)\Activision\Call of Duty 2\Uninst_Call of Duty(R) 2 Patch 1.3.log"
Call of Duty(R) 2-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057
Canon MP Navigator EX 1.0-->"C:\Program Files (x86)\Canon\MP Navigator EX 1.0\Maint.exe" /UninstallRemove C:\Program Files (x86)\Canon\MP Navigator EX 1.0\uninst.ini
Canon MP210 series-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series /L0x0005
Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini
Canon Utilities Easy-PhotoPrint EX-->C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini
Canon Utilities Solution Menu-->C:\Program Files (x86)\Canon\SolutionMenu\uninst.exe uninst.ini
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
ControlDeck-->MsiExec.exe /I{5B65EF64-1DFA-414A-8C94-7BB726158E21}
Convertator-->C:\Program Files (x86)\Convertator\uninstall.exe
DAEMON Tools Lite-->C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe
Don't Starve-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/219740
ETDWare PS/2-x64 7.0.5.7_WHQL-->C:\Program Files\Elantech\ETDUninst.exe
Express Gate-->MsiExec.exe /X{865CD808-6D31-4269-9D36-693CFE75D26A}
Facebook Video Calling 2.0.0.447-->MsiExec.exe /X{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}
Fast Boot-->MsiExec.exe /I{13F4A7F3-EABC-4261-AF6B-1317777F0755}
FormatFactory 2.96-->C:\Program Files (x86)\FreeTime\FormatFactory\uninst.exe
Foxit PDF Editor-->C:\Program Files\Foxit Software\PDF Editor\uninstall.exe
GamePark klient 2.0.9.0-->"C:\Program Files\GamePark2\unins000.exe"
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Heroes of Might and Magic® III Complete-->C:\Windows\IsUninst.exe -f"C:\Program Files (x86)\3DO\Heroes 3 Complete\Heroes of Might and Magic® III.isu" -c"C:\Program Files (x86)\Common Files\3DO Shared\3DOUnInst.dll
Hitman Absolution-->"C:\Program Files (x86)\SQUARE ENIX\Hitman Absolution\unins000.exe"
Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B6E073B9-F238-379A-AA45-D323CD308DAE} /parameterfolder Client
iTunes-->MsiExec.exe /I{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}
Java 7 Update 25-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217025FF}
League of Legends-->"C:\Program Files (x86)\InstallShield Installation Information\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\setup.exe" -runfromtemp -l0x0409 -removeonly
McAfee Security Scan Plus-->"C:\Program Files (x86)\McAfee Security Scan\uninstall.exe"
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /x64 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{790E02A1-145A-3843-8C13-A4F41C9B48B7}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft .NET Framework 4 Extended CSY Language Pack-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ExtendedLP\Setup.exe /repair /x86 /x64 /lcid 1029 /parameterfolder ExtendedLP
Microsoft .NET Framework 4 Extended CSY Language Pack-->MsiExec.exe /X{A324DC11-FF02-3CE8-9D6F-67EBC006D970}
Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /x64 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{8E34682C-8118-31F1-BC4C-98CD9675E1C2}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}
Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 - Czech/èeština-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall OMUI.CS-CZ /dll OSETUP.DLL
Microsoft Office O MUI (Czech) 2007-->MsiExec.exe /X{90120000-0100-0405-0000-0000000FF1CE}
Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2007-->MsiExec.exe /X{90120000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (English) 2007-->MsiExec.exe /X{90120000-002A-0409-1000-0000000FF1CE}
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0116-0409-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office SharePoint Designer MUI (Czech) 2007-->MsiExec.exe /X{90120000-0017-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Office X MUI (Czech) 2007-->MsiExec.exe /X{90120000-0101-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
NVIDIA GeForce Experience 1.8.1-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage Display.GFExperience
NVIDIA Ovladač 3D Vision 332.21-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage Display.3DVision
NVIDIA Ovladač HD audia 1.3.30.1-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage HDAudio.Driver
NVIDIA Ovladače grafiky 332.21-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX-->MsiExec.exe /I{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
NVIDIA Systémový software PhysX 9.13.0725-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage Display.PhysX
NVIDIA Virtual Audio 1.2.19-->"C:\Windows\SysWOW64\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{54157FD1-83EC-4852-B0A4-CA2B0976329B}\NVI2.DLL",UninstallPackage VirtualAudio.Driver
PIXMA Extended Survey Program-->C:\Program Files (x86)\Canon\IJPLM\SETUP.EXE -R
Razer Abyssus-->C:\Program Files (x86)\InstallShield Installation Information\{CBD6B23A-B54F-476A-9527-C262F469CACF}\setup.exe -runfromtemp -l0x0009 -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
Registrace uživatele zařízení Canon MP210 series-->C:\Program Files (x86)\Canon\IJEREG\MP210 series\UNINST.EXE
SAMSUNG USB Driver for Mobile Phones-->C:\Program Files (x86)\Samsung\USB Drivers\Uninstall.exe
ScanSoft OmniPage SE 4-->MsiExec.exe /X{DEE88727-779B-47A9-ACEF-F87CA5F92A65}
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DA36C2E5-6B34-3A6A-9C0A-7D1CC1C5A768} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7B82A51A-768B-3A7B-ADFA-F777097A8079} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E40184A4-4A61-3D2E-9035-CB6E1E610E07} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4736E989-32D9-3B91-90D7-C68848E118CA} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F1696E2F-4803-362F-A756-65B363483FE6} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8E6848A1-B790-34FE-921A-A5319258E254} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E7F6B64E-E11F-3D1C-868D-3F1443DA5A15} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {08BB8EA1-3BA7-3AD5-8A07-22A5EC1F704E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9D8496AE-4030-3E92-B44E-4F81051E6C85} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {9D621E6E-E010-3C80-A055-135891134750} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Extended
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
SRS Premium Sound Control Panel-->MsiExec.exe /I{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}
Steam-->C:\Program Files (x86)\Steam\uninstall.exe
Total Commander 64-bit (Remove or Repair)-->c:\totalcmd\tcunin64.exe
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client
Update for Microsoft .NET Framework 4 Extended (KB2468871)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2533523)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2600217)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Extended
USB 2.0 1.3M UVC WebCam-->C:\Windows\Uninstsxga.bat
VLC media player 2.0.7-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
WinFlash-->MsiExec.exe /X{8F21291E-0444-4B1D-B9F9-4370A73E346D}
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
Wireless Console 3-->MsiExec.exe /I{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}
Xfire (remove only)-->"C:\Program Files (x86)\Xfire\uninst.exe"

======System event log======

Computer Name: Dominik-PC
Event Code: 7036
Message: Stav služby Šifrování byl změněn na: Spuštěno
Record Number: 109532
Source Name: Service Control Manager
Time Written: 20130826084101.115245-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 7036
Message: Stav služby Bonjour Service byl změněn na: Spuštěno
Record Number: 109531
Source Name: Service Control Manager
Time Written: 20130826084100.959244-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 7036
Message: Stav služby Alcohol Virtual Drive Auto-mount Service byl změněn na: Spuštěno
Record Number: 109530
Source Name: Service Control Manager
Time Written: 20130826084100.850044-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 7036
Message: Stav služby Pracovní stanice byl změněn na: Spuštěno
Record Number: 109529
Source Name: Service Control Manager
Time Written: 20130826084059.742442-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 7036
Message: Stav služby Brána Windows Firewall byl změněn na: Spuštěno
Record Number: 109528
Source Name: Service Control Manager
Time Written: 20130826084059.680042-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: Dominik-PC
Event Code: 1001
Message: Chybný blok , typ 0
Název události: LiveKernelEvent
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20130516-1224-02.dmp
C:\Windows\Temp\WER-9863163-0.sysdata.xml
C:\Windows\Temp\WER81B0.tmp.WERInternalMetadata.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_06b681ee

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: d90471c2-be12-11e2-a528-e0cb4e0678cb
Stav hlášení: 0
Record Number: 62162
Source Name: Windows Error Reporting
Time Written: 20130924162300.000000-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 1001
Message: Chybný blok , typ 0
Název události: LiveKernelEvent
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20130919-2248-01.dmp
C:\Windows\Temp\WER-2067730-0.sysdata.xml
C:\Windows\Temp\WERA065.tmp.WERInternalMetadata.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_060ba534

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: df6ce9c7-216c-11e3-9292-e0cb4e0678cb
Stav hlášení: 0
Record Number: 62161
Source Name: Windows Error Reporting
Time Written: 20130924162300.000000-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 1001
Message: Chybný blok , typ 0
Název události: LiveKernelEvent
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20130516-1226-01.dmp
C:\Windows\Temp\WER-9966950-0.sysdata.xml
C:\Windows\Temp\WER17C7.tmp.WERInternalMetadata.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_03041863

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 16deb360-be13-11e2-a528-e0cb4e0678cb
Stav hlášení: 0
Record Number: 62160
Source Name: Windows Error Reporting
Time Written: 20130924162300.000000-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 1001
Message: Chybný blok , typ 0
Název události: LiveKernelEvent
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20130516-1223.dmp
C:\Windows\Temp\WER-9780373-0.sysdata.xml
C:\Windows\Temp\WER3E69.tmp.WERInternalMetadata.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_02f93eb7

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: a7ab7cd2-be12-11e2-a528-e0cb4e0678cb
Stav hlášení: 0
Record Number: 62159
Source Name: Windows Error Reporting
Time Written: 20130924162300.000000-000
Event Type: Informace
User:

Computer Name: Dominik-PC
Event Code: 1001
Message: Chybný blok , typ 0
Název události: LiveKernelEvent
Reakce: Není k dispozici
ID souboru CAB: 0

Podpis problému:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Připojené soubory:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20130723-0916.dmp
C:\Windows\Temp\WER-31543-0.sysdata.xml
C:\Windows\Temp\WERD79A.tmp.WERInternalMetadata.xml

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_0251d7b8

Symbol analýzy:
Opětovné hledání řešení: 0
ID hlášení: 73441404-fa82-11e2-9874-002243d5ab68
Stav hlášení: 0
Record Number: 62158
Source Name: Windows Error Reporting
Time Written: 20130924162300.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: Dominik-PC
Event Code: 5058
Message: Operace se souborem klíče.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: DOMINIK-PC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: Není k dispozici.
Název klíče: {0A6D3E92-FD96-435C-ABC4-FE4469CA8C34}
Typ klíče: Klíč počítače

Informace o operaci se souborem klíče:
Cesta k souboru: C:\ProgramData\Microsoft\Crypto\Keys\d5e20489f6347f847e7f71f57d54f492_c61a7169-19bd-438b-8a89-715c1057ad3d
Operace: Čtení trvalého klíče ze souboru
Návratový kód: 0x0
Record Number: 26553
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130618133654.126668-000
Event Type: Úspěšný audit
User:

Computer Name: Dominik-PC
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-21-3252742880-3292239007-3655233323-1001
Název účtu: UpdatusUser
Doména účtu: Dominik-PC
ID přihlášení: 0xdbecb

Oprávnění: SeAssignPrimaryTokenPrivilege
SeImpersonatePrivilege
Record Number: 26552
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130618133653.770648-000
Event Type: Úspěšný audit
User:

Computer Name: Dominik-PC
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-21-3252742880-3292239007-3655233323-1001
Název účtu: UpdatusUser
Doména účtu: Dominik-PC
ID přihlášení: 0xda87d

Typ přihlášení: 9

Nové přihlášení:
ID zabezpečení: S-1-5-21-3252742880-3292239007-3655233323-1001
Název účtu: UpdatusUser
Doména účtu: Dominik-PC
ID přihlášení: 0xdbecb
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x154
Název procesu: C:\Windows\System32\svchost.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě ::1
Zdrojový port: 0

Podrobné informace o ověření:
Proces přihlášení: seclogo
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 26551
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130618133653.770648-000
Event Type: Úspěšný audit
User:

Computer Name: Dominik-PC
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-21-3252742880-3292239007-3655233323-1001
Název účtu: UpdatusUser
Doména účtu: Dominik-PC
ID přihlášení: 0xda87d

Oprávnění: SeAssignPrimaryTokenPrivilege
SeImpersonatePrivilege
Record Number: 26550
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130618133652.162556-000
Event Type: Úspěšný audit
User:

Computer Name: Dominik-PC
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: DOMINIK-PC$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-21-3252742880-3292239007-3655233323-1001
Název účtu: UpdatusUser
Doména účtu: Dominik-PC
ID přihlášení: 0xda87d
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x26c
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice: DOMINIK-PC
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 26549
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20130618133652.162556-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"asl.log"=Destination=file

-----------------EOF-----------------

#4 Příspěvek od **vyosek** » 11 úno 2014 17:54

No vypada hodne zastarale = neaktulni = nelegalni

Neaktulni antivir nechrani, takze ESET odinstalujte

Nainstalujte Avast Free

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

zojdicek · #5 Příspěvek od **zojdicek** » 11 úno 2014 19:00

Udělal jsem vše podle návodu. Aktualizoval jsem vše přes Avast Free a už teď se mi zdá ntb plynulejší....

# AdwCleaner v3.018 - Report created 11/02/2014 at 18:55:39
# Updated 28/01/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Dominik - DOMINIK-PC
# Running from : C:\Users\Dominik\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Deleted : C:\Program Files (x86)\myfree codec
Folder Deleted : C:\Program Files (x86)\Protected Search
Folder Deleted : C:\Users\Dominik\AppData\Local\apn
Folder Deleted : C:\Users\Dominik\AppData\LocalLow\CertifiedToolbar
Folder Deleted : C:\Users\Dominik\AppData\LocalLow\SimplyTech

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\AppDataLow\Software\simplytech
Key Deleted : HKLM\Software\DeviceVM
Key Deleted : HKLM\Software\Myfree Codec
Key Deleted : HKLM\Software\PIP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]

-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [5304 octets] - [11/02/2014 18:52:43]
AdwCleaner[S0].txt - [4072 octets] - [11/02/2014 18:55:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4132 octets] ##########

#6 Příspěvek od **vyosek** » 11 úno 2014 19:46

Poprosim jeste o log z FRST http://forum.viry.cz/viewtopic.php?f=30&t=133101

zojdicek · #7 Příspěvek od **zojdicek** » 11 úno 2014 20:08

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by Dominik (administrator) on DOMINIK-PC on 11-02-2014 16:12:01
Running from C:\Users\Dominik\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(Allstar Group, s.r.o.) C:\Program Files\GamePark2\gpcl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
(ASUS) C:\Windows\AsScrPro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
() C:\Program Files (x86)\Razer\Abyssus\razerhid.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\Razer\Abyssus\razertra.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Abyssus\razerofa.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [617856 2009-07-30] (ELAN Microelectronic Corp.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [4030008 2011-09-08] (ESET)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1840720 2007-04-03] (CANON INC.)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [6937216 2009-10-09] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [170624 2009-08-19] (ASUS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Abyssus] - C:\Program Files (x86)\Razer\Abyssus\razerhid.exe [223744 2010-05-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\Run: [Facebook Update] - C:\Users\Dominik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-03] (Facebook Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {129bae9b-5ff7-11e3-9482-e0cb4e0678cb} - I:\AutoRun.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {8d0816cd-106f-11e2-b789-806e6f6e6963} - D:\InstAll.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {a079a993-1077-11e2-81af-e0cb4e0678cb} - F:\Setup.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e3349c-575f-11e2-88ce-e0cb4e0678cb} - G:\SETUP.EXE
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e334aa-575f-11e2-88ce-e0cb4e0678cb} - H:\SETUP.EXE

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... 592-802341
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0DB6FC67-77E8-4520-BCC0-FE0AF526567C} URL = http://websearch.ask.com/redirect?clien ... D825AE14DC
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

Chrome:
=======
CHR HomePage: hxxp://www.warcenter.cz/viewtopic.php?f=91&t=3 ... a&start=30
CHR Extension: (Dokumenty Google) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-11]
CHR Extension: (Disk Google) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-11]
CHR Extension: (YouTube) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-11]
CHR Extension: (Peněženka Google) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Gmail) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-11]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Dominik\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2013-01-02]

==================== Services (Whitelisted) =================

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-07] ()
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [974944 2011-09-08] (ESET)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [101528 2007-04-13] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2013-01-05] ()

==================== Drivers (Whitelisted) ====================

R3 Abyssus; C:\Windows\System32\drivers\Abyssus.sys [10880 2009-10-30] (Razer (Asia-Pacific) Pte Ltd)
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-05] (DT Soft Ltd)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [187632 2011-08-04] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [38288 2011-08-04] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62496 2011-08-04] (ESET)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] ()
S3 hipeer20; C:\Windows\System32\DRIVERS\remobo64.sys [30720 2010-08-01] (Windows (R) Codename Longhorn DDK provider)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-07] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2013-06-17] ()
U3 aq5vj0xa; C:\Windows\System32\Drivers\aq5vj0xa.sys [0 ] (Advanced Micro Devices)
U3 atdrcr1n; C:\Windows\System32\Drivers\atdrcr1n.sys [0 ] (Advanced Micro Devices)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-02-11 16:12 - 2014-02-11 16:13 - 00013214 _____ () C:\Users\Dominik\Desktop\FRST.txt
2014-02-11 16:11 - 2014-02-11 16:12 - 00000000 ____D () C:\FRST
2014-02-11 13:40 - 2014-02-11 13:42 - 02151424 _____ (Farbar) C:\Users\Dominik\Desktop\FRST64.exe
2014-02-11 13:37 - 2014-02-11 13:37 - 00688992 _____ (Swearware) C:\Users\Dominik\Desktop\dds.exe
2014-02-11 13:35 - 2014-02-11 13:35 - 00000000 ____D () C:\rsit
2014-02-11 13:35 - 2014-02-11 13:35 - 00000000 ____D () C:\Program Files\trend micro
2014-02-11 13:33 - 2014-02-11 13:33 - 00935175 _____ () C:\Users\Dominik\Desktop\RSITx64.exe
2014-02-10 23:03 - 2014-02-11 12:39 - 00000672 _____ () C:\Windows\setupact.log
2014-02-10 23:03 - 2014-02-11 12:39 - 00000420 _____ () C:\Windows\AutoKMS.log
2014-02-10 23:03 - 2014-02-10 23:03 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-10 18:23 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-10 18:23 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-10 18:23 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-10 18:23 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-10 18:22 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-02-10 18:18 - 2014-02-10 18:18 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-10 18:18 - 2014-02-10 18:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-10 18:18 - 2014-02-10 18:18 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-10 18:18 - 2014-02-10 18:18 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-10 18:18 - 2014-02-10 18:18 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-10 18:18 - 2014-02-10 18:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-10 18:18 - 2014-02-10 18:18 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-10 18:18 - 2014-02-10 18:18 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-10 18:18 - 2014-02-10 18:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-10 18:18 - 2014-02-10 18:18 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-10 18:18 - 2014-02-10 18:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-10 18:16 - 2014-02-10 18:23 - 00011663 _____ () C:\Windows\IE11_main.log
2014-02-10 18:14 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-10 18:14 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-10 18:14 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-10 18:14 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-10 18:13 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-10 18:13 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-10 18:13 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-10 18:13 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-10 16:53 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-10 16:53 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-10 16:53 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-10 16:53 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-10 16:53 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-10 16:53 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-10 16:53 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-10 16:53 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-02-10 16:53 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-02-10 16:53 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-02-10 16:53 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-10 16:53 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-02-10 16:53 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-02-10 16:53 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-10 16:53 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-10 16:53 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-10 16:53 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-10 16:52 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-10 16:52 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-02-10 16:52 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-10 16:52 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-10 16:52 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-10 16:52 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-10 16:52 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-10 16:52 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-02-10 16:52 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-02-10 16:52 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-02-10 16:52 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-02-10 16:52 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-02-10 16:52 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-02-10 16:52 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-02-10 16:52 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-02-10 16:52 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-02-10 16:52 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-02-10 16:52 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-10 16:52 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-10 16:52 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-10 16:52 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-10 16:52 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-10 16:52 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-10 16:52 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-10 16:52 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-10 16:52 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-10 16:52 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-10 16:52 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-10 16:51 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-10 16:51 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-10 16:51 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-10 16:51 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-10 16:51 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-10 16:51 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-02-10 16:51 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-10 16:51 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-02-10 16:51 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-02-10 16:51 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-02-10 16:51 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-02-10 16:51 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-02-10 16:51 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-02-10 16:51 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-02-10 16:51 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-02-10 16:51 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-02-10 16:51 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-02-10 16:51 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-02-10 16:51 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-02-10 16:51 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-02-10 16:51 - 2012-11-30 00:17 - 00420064 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-10 16:51 - 2012-11-30 00:15 - 00420064 _____ () C:\Windows\system32\locale.nls
2014-02-10 16:50 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-10 16:50 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-02-10 16:50 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-02-10 16:50 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-02-10 16:50 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-10 16:50 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-02-10 16:31 - 2014-02-10 16:31 - 00000017 _____ () C:\Users\Dominik\AppData\Local\resmon.resmoncfg
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-02-10 16:24 - 2014-02-11 16:03 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-10 16:24 - 2014-02-10 17:03 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-10 14:58 - 2014-02-10 14:58 - 00060640 _____ () C:\Users\Dominik\Documents\cc_20140210_145807.reg
2014-02-10 14:54 - 2014-02-10 14:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-10 14:50 - 2014-02-11 12:39 - 00003178 _____ () C:\Windows\System32\Tasks\P4GIntlCtrl
2014-02-09 18:53 - 2014-02-09 18:53 - 00000000 ____D () C:\Users\Dominik\AppData\Local\NVIDIA Corporation
2014-02-09 18:52 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-02-09 18:52 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-02-09 18:51 - 2014-02-09 18:51 - 00000000 ____D () C:\Users\Dominik\AppData\Local\NVIDIA
2014-02-09 18:51 - 2014-02-09 18:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-09 18:42 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-09 18:42 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-02-09 18:42 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-09 18:40 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-09 18:40 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-09 18:40 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-09 18:40 - 2013-11-28 14:38 - 00074016 _____ (NVIDIA Corporation) C:\Windows\system32\nvapo64v.dll
2014-02-09 18:40 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-06 20:20 - 2014-02-06 20:20 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-05 21:23 - 2014-02-05 21:23 - 00033134 _____ () C:\Users\Dominik\Documents\cc_20140205_212344.reg
2014-02-05 03:23 - 2014-02-05 03:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:06 - 2014-02-05 03:06 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-05 03:06 - 2014-02-05 03:06 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-04 20:54 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-04 20:54 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-04 20:54 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-04 20:54 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-04 20:54 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-04 20:54 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-04 20:54 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-04 20:54 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-02-04 20:54 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-04 20:54 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-02-04 20:54 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-04 20:54 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-04 20:54 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-02-04 20:54 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-04 20:54 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-04 20:54 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-04 20:54 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-04 20:54 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-04 20:53 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-02-04 20:53 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-04 20:53 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-04 20:53 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-04 20:53 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-04 20:53 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-04 20:53 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-04 20:53 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-04 20:53 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-02-04 20:53 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-04 20:53 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-04 20:53 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-04 20:53 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-04 20:53 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-04 20:53 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-04 20:53 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-04 20:53 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-04 20:53 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-04 20:53 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-04 20:53 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-04 20:53 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-04 20:53 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-04 20:53 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-02-04 20:53 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-04 20:53 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 20:53 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-04 20:53 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-04 20:53 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-04 20:53 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-02-04 20:53 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2014-02-04 20:53 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-04 20:53 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-04 20:53 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-04 20:53 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-04 20:53 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-04 20:53 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-04 20:53 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-02-04 20:53 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-04 20:53 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-02-04 20:53 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-04 20:53 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-04 20:53 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-04 20:39 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-04 20:39 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-04 20:39 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-04 20:39 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-04 20:39 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-23 21:29 - 2014-01-23 21:29 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 21:26 - 2014-01-23 21:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 21:26 - 2014-01-23 21:29 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 21:26 - 2014-01-23 21:28 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-13 11:45 - 2014-02-06 16:16 - 00000000 ____D () C:\Users\Dominik\Desktop\Zkousky 2 rocnik

==================== One Month Modified Files and Folders =======

2014-02-11 16:13 - 2014-02-11 16:12 - 00013214 _____ () C:\Users\Dominik\Desktop\FRST.txt
2014-02-11 16:12 - 2014-02-11 16:11 - 00000000 ____D () C:\FRST
2014-02-11 16:11 - 2012-10-07 13:15 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\TS3Client
2014-02-11 16:03 - 2014-02-10 16:24 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-11 15:58 - 2012-10-07 13:17 - 00000954 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 13:42 - 2014-02-11 13:40 - 02151424 _____ (Farbar) C:\Users\Dominik\Desktop\FRST64.exe
2014-02-11 13:37 - 2014-02-11 13:37 - 00688992 _____ (Swearware) C:\Users\Dominik\Desktop\dds.exe
2014-02-11 13:35 - 2014-02-11 13:35 - 00000000 ____D () C:\rsit
2014-02-11 13:35 - 2014-02-11 13:35 - 00000000 ____D () C:\Program Files\trend micro
2014-02-11 13:35 - 2012-10-07 23:41 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\vlc
2014-02-11 13:33 - 2014-02-11 13:33 - 00935175 _____ () C:\Users\Dominik\Desktop\RSITx64.exe
2014-02-11 13:21 - 2012-10-07 12:13 - 01994977 _____ () C:\Windows\WindowsUpdate.log
2014-02-11 13:15 - 2013-11-03 19:10 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000UA.job
2014-02-11 12:48 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-11 12:48 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-11 12:39 - 2014-02-10 23:03 - 00000672 _____ () C:\Windows\setupact.log
2014-02-11 12:39 - 2014-02-10 23:03 - 00000420 _____ () C:\Windows\AutoKMS.log
2014-02-11 12:39 - 2014-02-10 14:50 - 00003178 _____ () C:\Windows\System32\Tasks\P4GIntlCtrl
2014-02-11 12:39 - 2012-10-07 13:17 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 12:39 - 2012-10-07 12:53 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-11 12:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-11 12:30 - 2009-07-14 06:08 - 00032566 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-10 23:15 - 2012-10-07 17:48 - 00000000 ____D () C:\Users\Dominik\Desktop\Programy
2014-02-10 23:15 - 2009-07-14 16:18 - 00669386 _____ () C:\Windows\system32\perfh005.dat
2014-02-10 23:15 - 2009-07-14 16:18 - 00140990 _____ () C:\Windows\system32\perfc005.dat
2014-02-10 23:15 - 2009-07-14 06:13 - 01584606 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-10 23:13 - 2012-10-07 12:55 - 00109296 _____ () C:\Users\Dominik\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-10 23:13 - 2012-10-07 12:43 - 00001397 _____ () C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-10 23:13 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-02-10 23:10 - 2012-10-07 13:09 - 00000000 ____D () C:\Windows\Panther
2014-02-10 23:08 - 2009-07-14 05:45 - 00413296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-10 23:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-10 23:04 - 2012-10-07 13:02 - 00002106 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-02-10 23:04 - 2012-10-07 13:02 - 00001677 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-10 23:03 - 2014-02-10 23:03 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-10 18:23 - 2014-02-10 18:16 - 00011663 _____ () C:\Windows\IE11_main.log
2014-02-10 18:18 - 2014-02-10 18:18 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-10 18:18 - 2014-02-10 18:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-10 18:18 - 2014-02-10 18:18 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-10 18:18 - 2014-02-10 18:18 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-10 18:18 - 2014-02-10 18:18 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-10 18:18 - 2014-02-10 18:18 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-10 18:18 - 2014-02-10 18:18 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-10 18:18 - 2014-02-10 18:18 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-10 18:18 - 2014-02-10 18:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-10 18:18 - 2014-02-10 18:18 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-10 18:18 - 2014-02-10 18:18 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-10 18:18 - 2014-02-10 18:18 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-10 18:18 - 2014-02-10 18:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-10 17:03 - 2014-02-10 16:24 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-10 17:03 - 2012-10-13 13:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-10 17:03 - 2012-10-13 13:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-10 16:34 - 2013-03-03 20:02 - 00001191 _____ () C:\Users\Dominik\AppData\Roaming\Network Meter_Settings.ini
2014-02-10 16:31 - 2014-02-10 16:31 - 00000017 _____ () C:\Users\Dominik\AppData\Local\resmon.resmoncfg
2014-02-10 16:29 - 2012-10-07 13:34 - 00000000 ____D () C:\Users\Dominik\Desktop\Fotky
2014-02-10 16:28 - 2012-10-07 13:06 - 00000000 ____D () C:\Users\Dominik\AppData\Local\Adobe
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-10 16:25 - 2014-02-10 16:25 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2014-02-10 14:58 - 2014-02-10 14:58 - 00060640 _____ () C:\Users\Dominik\Documents\cc_20140210_145807.reg
2014-02-10 14:54 - 2014-02-10 14:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-10 14:54 - 2012-10-07 13:23 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-10 09:51 - 2013-03-04 14:20 - 00003114 _____ () C:\Windows\System32\Tasks\P4G Sidebar
2014-02-09 23:55 - 2012-10-07 13:13 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Xfire
2014-02-09 19:15 - 2013-11-03 19:10 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000Core.job
2014-02-09 18:53 - 2014-02-09 18:53 - 00000000 ____D () C:\Users\Dominik\AppData\Local\NVIDIA Corporation
2014-02-09 18:53 - 2012-10-07 13:34 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-09 18:52 - 2012-10-07 13:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-09 18:52 - 2012-10-07 13:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-09 18:51 - 2014-02-09 18:51 - 00000000 ____D () C:\Users\Dominik\AppData\Local\NVIDIA
2014-02-09 18:51 - 2014-02-09 18:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-09 18:39 - 2013-01-29 19:13 - 00000000 ____D () C:\Users\Dominik\Desktop\Programy na spousteni
2014-02-09 18:38 - 2013-01-02 17:46 - 00000000 ____D () C:\Users\Dominik\Desktop\ftvs
2014-02-06 20:20 - 2014-02-06 20:20 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-06 20:20 - 2013-07-09 10:17 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-06 19:33 - 2012-10-07 13:34 - 00000000 ____D () C:\Users\Dominik\Desktop\Filmy
2014-02-06 16:16 - 2014-01-13 11:45 - 00000000 ____D () C:\Users\Dominik\Desktop\Zkousky 2 rocnik
2014-02-05 21:25 - 2012-10-18 21:27 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\Samsung
2014-02-05 21:25 - 2012-10-18 21:20 - 00000000 ____D () C:\ProgramData\Samsung
2014-02-05 21:25 - 2012-10-18 21:20 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-02-05 21:24 - 2012-10-07 12:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-05 21:23 - 2014-02-05 21:23 - 00033134 _____ () C:\Users\Dominik\Documents\cc_20140205_212344.reg
2014-02-05 21:22 - 2013-12-23 20:10 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-05 21:22 - 2012-10-07 13:16 - 00000000 ____D () C:\Users\Dominik\AppData\Roaming\DAEMON Tools Lite
2014-02-05 21:20 - 2012-10-07 13:44 - 00000000 ____D () C:\Windows\Minidump
2014-02-05 10:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-05 10:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-05 10:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-05 10:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-05 03:23 - 2014-02-05 03:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:23 - 2014-02-05 03:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-05 03:06 - 2014-02-05 03:06 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-05 03:06 - 2014-02-05 03:06 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-05 02:46 - 2012-10-07 15:55 - 01563764 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-04 21:02 - 2013-10-08 14:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-04 15:46 - 2012-10-07 13:34 - 00000000 ____D () C:\Users\Dominik\Desktop\Škola
2014-02-02 13:04 - 2012-10-07 13:13 - 00000000 ____D () C:\ProgramData\Xfire
2014-01-27 20:25 - 2013-01-05 19:55 - 00214520 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-27 20:25 - 2013-01-05 19:55 - 00214520 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-23 21:29 - 2014-01-23 21:29 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-23 21:29 - 2014-01-23 21:26 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-23 21:29 - 2014-01-23 21:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-23 21:28 - 2014-01-23 21:26 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-23 21:27 - 2014-01-23 21:27 - 00000000 ____D () C:\Program Files\iPod
2014-01-23 21:14 - 2012-10-07 13:28 - 00000000 ____D () C:\ProgramData\Apple
2014-01-16 09:59 - 2012-10-07 14:07 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-01-22 14:17

==================== End Of Log ============================

#8 Příspěvek od **vyosek** » 12 úno 2014 07:45

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Abyssus] - C:\Program Files (x86)\Razer\Abyssus\razerhid.exe [223744 2010-05-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\Run: [Facebook Update] - C:\Users\Dominik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-03] (Facebook Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {129bae9b-5ff7-11e3-9482-e0cb4e0678cb} - I:\AutoRun.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {8d0816cd-106f-11e2-b789-806e6f6e6963} - D:\InstAll.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {a079a993-1077-11e2-81af-e0cb4e0678cb} - F:\Setup.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e3349c-575f-11e2-88ce-e0cb4e0678cb} - G:\SETUP.EXE
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e334aa-575f-11e2-88ce-e0cb4e0678cb} - H:\SETUP.EXE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... 592-802341
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0DB6FC67-77E8-4520-BCC0-FE0AF526567C} URL = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYCZ&apn_uid=83101bd3-efe5-48d7-8e16-00049d661a43&apn_sauid=3AC16378-05DF-4DEE-9859-EED825AE14DC
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 

2014-02-11 13:40 - 2014-02-11 13:42 - 02151424 _____ (Farbar) C:\Users\Dominik\Desktop\FRST64.exe
2014-02-11 13:37 - 2014-02-11 13:37 - 00688992 _____ (Swearware) C:\Users\Dominik\Desktop\dds.exe
2014-02-11 13:33 - 2014-02-11 13:33 - 00935175 _____ () C:\Users\Dominik\Desktop\RSITx64.exe
2014-02-10 23:03 - 2014-02-11 12:39 - 00000672 _____ () C:\Windows\setupact.log
2014-02-10 23:03 - 2014-02-11 12:39 - 00000420 _____ () C:\Windows\AutoKMS.log
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

zojdicek · #9 Příspěvek od **zojdicek** » 12 úno 2014 10:57

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-02-2014 01
Ran by Dominik at 2014-02-12 10:14:05 Run:1
Running from C:\Users\Dominik\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Abyssus] - C:\Program Files (x86)\Razer\Abyssus\razerhid.exe [223744 2010-05-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\Run: [Facebook Update] - C:\Users\Dominik\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-03] (Facebook Inc.)
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {129bae9b-5ff7-11e3-9482-e0cb4e0678cb} - I:\AutoRun.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {8d0816cd-106f-11e2-b789-806e6f6e6963} - D:\InstAll.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {a079a993-1077-11e2-81af-e0cb4e0678cb} - F:\Setup.exe
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e3349c-575f-11e2-88ce-e0cb4e0678cb} - G:\SETUP.EXE
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\...\MountPoints2: {c9e334aa-575f-11e2-88ce-e0cb4e0678cb} - H:\SETUP.EXE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... 592-802341
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si= ... 592-802341
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0DB6FC67-77E8-4520-BCC0-FE0AF526567C} URL = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYYYCZ&apn_uid=83101bd3-efe5-48d7-8e16-00049d661a43&apn_sauid=3AC16378-05DF-4DEE-9859-EED825AE14DC
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =

2014-02-11 13:40 - 2014-02-11 13:42 - 02151424 _____ (Farbar) C:\Users\Dominik\Desktop\FRST64.exe
2014-02-11 13:37 - 2014-02-11 13:37 - 00688992 _____ (Swearware) C:\Users\Dominik\Desktop\dds.exe
2014-02-11 13:33 - 2014-02-11 13:33 - 00935175 _____ () C:\Users\Dominik\Desktop\RSITx64.exe
2014-02-10 23:03 - 2014-02-11 12:39 - 00000672 _____ () C:\Windows\setupact.log
2014-02-10 23:03 - 2014-02-11 12:39 - 00000420 _____ () C:\Windows\AutoKMS.log
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3252742880-3292239007-3655233323-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SSBkgdUpdate => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\OpwareSE4 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Abyssus => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKU\S-1-5-21-3252742880-3292239007-3655233323-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => Value deleted successfully.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{129bae9b-5ff7-11e3-9482-e0cb4e0678cb} => Key not found.
HKCR\CLSID\{129bae9b-5ff7-11e3-9482-e0cb4e0678cb} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8d0816cd-106f-11e2-b789-806e6f6e6963} => Key not found.
HKCR\CLSID\{8d0816cd-106f-11e2-b789-806e6f6e6963} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a079a993-1077-11e2-81af-e0cb4e0678cb} => Key not found.
HKCR\CLSID\{a079a993-1077-11e2-81af-e0cb4e0678cb} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9e3349c-575f-11e2-88ce-e0cb4e0678cb} => Key not found.
HKCR\CLSID\{c9e3349c-575f-11e2-88ce-e0cb4e0678cb} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9e334aa-575f-11e2-88ce-e0cb4e0678cb} => Key not found.
HKCR\CLSID\{c9e334aa-575f-11e2-88ce-e0cb4e0678cb} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Default_Page_URL => Value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Default_Page_URL => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0DB6FC67-77E8-4520-BCC0-FE0AF526567C} => Key deleted successfully.
HKCR\CLSID\{0DB6FC67-77E8-4520-BCC0-FE0AF526567C} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found.
HKCR\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found.
C:\Users\Dominik\Desktop\FRST64.exe => Moved successfully.

#10 Příspěvek od **vyosek** » 15 úno 2014 08:07

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel èistiè

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

zojdicek · #11 Příspěvek od **zojdicek** » 21 úno 2014 00:13

Mnohokrát děkuji za pomoc !

#12 Příspěvek od **vyosek** » 23 úno 2014 09:25

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Prosím o kontrolu logu mého ntb

Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb

Re: Prosím o kontrolu logu mého ntb