Problém u prohlížeče IE11

[danatoma]

Dobrý den!
Spouštím internet přes Chrome, ale dnes jsem spustila přes IE11 a při přihlášení na seznam.cz - resp. do e-mailu se mi objevila hláška - screen přikládám! omlouvám se - toto už je vyřešené!!!

Prosím o kontrolu logu - jestli tam něco není.
Děkuji!!!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:12:23, on 22.4.2014
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Maminka\Desktop\123gg.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7165 bytes

[Márty84]

Zdravim

Podelte se s nami o svuj uspech a napiste, jak jste to vyresila

Jinak log z HJT je na kontrolu nedostacujici, zvlast u 64bit systemu, takze kdybyste chtela poradnou kontrolu, dejte log z RSITx64 http://images.malwareremoval.com/random/RSITx64.exe

Z toho mala, co tento log ukazuje, nevidim zadnou nakazu, jen nejake ty zbytecnosti.

[danatoma]

No, problém nebyl v certifikátu. Z fóra Microsoftu mi poradili toto:

Zkus pro začátek vyresetovat nastavení IE do základního stavu.
http://windows.microsoft.com/cs-CZ/wind ... Explorer-9
V IE: Nástroje -> Možnosti internetu -> Upřesnit -> Obnovení nastavení aplikace Internet Explorer -> Obnovit ...

Opravdu to zafungovalo - IHNED!!!

Takže HJT můžu klíďo odinstalovat? Nebo nechat tak a používat jen někdy?

Tak a jdu udělat nový log...


Tady je:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Maminka at 2014-04-23 10:17:51
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 38 GB (49%) free of 76 GB
Total RAM: 1984 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:18:17, on 23.4.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Maminka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7489 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"
"C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe" -Embedding
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{3919AE52-9AA1-4ADB-9257-DD5917393BF5}
{CBA0EDE6-2904-4A9F-B977-6E483275AC77}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --channel="2880.1.27328089\736790602" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --disable-gpu-compositing --channel="2880.3.1928771554\355636252" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2880.131.445828783\1432141608" --use-gl=swiftshader --supports-dual-gpus=false --swiftshader-path="C:\Users\Maminka\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159" --gpu-driver-bug-workarounds=0,1,14,28 --gpu-vendor-id=0x1106 --gpu-device-id=0x3108 --gpu-driver-vendor=Microsoft --gpu-driver-version=6.1.7600.16385 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --disable-gpu-compositing --channel="2880.143.1717049318\2030736924" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe19_ Global\UsGthrCtrlFltPipeMssGthrPipe19 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\Program Files\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512
"C:\Users\Maminka\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --disable-gpu-compositing --channel="2880.154.718959246\1218355109" /prefetch:673131151
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-23 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-23 436600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-09-12 5618456]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-23 3873704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-23 10:17:54 ----D---- C:\Program Files\trend micro
2014-04-23 10:17:51 ----D---- C:\rsit
2014-04-23 08:34:15 ----D---- C:\Program Files\Revo Uninstaller
2014-04-23 08:11:00 ----D---- C:\Program Files\RegCleaner
2014-04-23 00:03:54 ----D---- C:\Users\Maminka\AppData\Roaming\AVAST Software
2014-04-23 00:01:57 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-04-23 00:01:55 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-23 00:01:55 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-04-23 00:01:54 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-04-23 00:01:54 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-04-23 00:01:53 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-04-23 00:01:45 ----A---- C:\Windows\system32\aswBoot.exe
2014-04-23 00:01:17 ----A---- C:\Windows\avastSS.scr
2014-04-23 00:00:22 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-04-22 23:59:24 ----D---- C:\Program Files\AVAST Software
2014-04-22 23:02:01 ----D---- C:\ProgramData\AVAST Software
2014-04-22 19:14:31 ----D---- C:\Program Files\CCleaner
2014-04-22 06:48:18 ----A---- C:\Windows\system32\CNMLM9W.DLL
2014-04-21 09:55:14 ----D---- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2014-04-20 20:41:40 ----D---- C:\Program Files\Microsoft Silverlight
2014-04-20 20:41:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-04-20 19:51:18 ----D---- C:\Program Files\Search
2014-04-20 08:30:25 ----A---- C:\Windows\IsUninst.exe
2014-04-15 12:05:24 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-15 12:05:24 ----A---- C:\Windows\system32\ieui.dll
2014-04-15 12:05:20 ----A---- C:\Windows\system32\vbscript.dll
2014-04-15 12:05:19 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-15 12:05:05 ----A---- C:\Windows\system32\iernonce.dll
2014-04-15 12:05:05 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-15 12:05:04 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-15 12:05:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-15 12:05:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-15 12:05:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-15 12:05:01 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\msrating.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-15 12:04:59 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-15 12:04:59 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-15 12:04:58 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-15 12:04:58 ----A---- C:\Windows\system32\iesetup.dll
2014-04-15 12:04:57 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-15 12:04:56 ----A---- C:\Windows\system32\mshtml.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-15 12:04:53 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-15 12:04:53 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-15 12:04:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-15 12:04:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-15 12:04:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-15 12:04:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-15 12:04:50 ----A---- C:\Windows\system32\iertutil.dll
2014-04-15 12:04:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-15 12:04:49 ----A---- C:\Windows\system32\wininet.dll
2014-04-15 12:04:49 ----A---- C:\Windows\system32\urlmon.dll
2014-04-15 12:04:48 ----A---- C:\Windows\system32\ieframe.dll
2014-04-15 12:04:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-15 12:04:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-04-15 12:04:45 ----A---- C:\Windows\system32\jscript9.dll
2014-04-15 12:04:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-10 10:35:07 ----D---- C:\Program Files\PhotoFiltre Studio
2014-04-09 19:21:41 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-04-09 19:21:41 ----A---- C:\Windows\system32\iologmsg.dll
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\storport.sys
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\wow64win.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\wow64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\ntvdm64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\kernel32.dll
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\user.exe
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-04-09 19:21:31 ----A---- C:\Windows\system32\wow64cpu.dll
2014-04-09 19:21:29 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-04-09 01:01:49 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-04-09 00:55:12 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-04-09 00:54:59 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-04-09 00:54:59 ----A---- C:\Windows\system32\elshyph.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\url.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-04-09 00:54:51 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 00:54:51 ----A---- C:\Windows\system32\jsIntl.dll
2014-04-09 00:54:50 ----A---- C:\Windows\system32\msls31.dll
2014-04-09 00:54:49 ----A---- C:\Windows\system32\msfeedssync.exe
2014-04-09 00:54:49 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-04-09 00:54:48 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-04-09 00:54:48 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-04-09 00:54:47 ----A---- C:\Windows\system32\mshtmler.dll
2014-04-09 00:54:47 ----A---- C:\Windows\system32\iesysprep.dll
2014-04-09 00:54:44 ----A---- C:\Windows\system32\ieapfltr.dat
2014-04-09 00:54:44 ----A---- C:\Windows\system32\icardie.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\url.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\iedkcs32.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\webcheck.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\mshtmled.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\licmgr10.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\inseng.dll
2014-04-09 00:54:41 ----A---- C:\Windows\system32\wextract.exe
2014-04-09 00:54:41 ----A---- C:\Windows\system32\iexpress.exe
2014-04-09 00:54:35 ----A---- C:\Windows\system32\pngfilt.dll
2014-04-09 00:54:35 ----A---- C:\Windows\system32\occache.dll
2014-04-09 00:54:34 ----A---- C:\Windows\system32\mshta.exe
2014-04-09 00:54:33 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\jscript.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\imgutil.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\iepeers.dll
2014-04-09 00:15:29 ----D---- C:\Users\Maminka\AppData\Roaming\AV Bros Page Curl Pro 2.2 DEMO (64 Bit)
2014-04-08 09:34:48 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-04-08 09:34:48 ----A---- C:\Windows\system32\fsutil.exe
2014-04-08 09:34:48 ----A---- C:\Windows\system32\esent.dll
2014-04-08 09:34:48 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-04-08 09:34:47 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-04-08 09:34:20 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-04-08 09:34:20 ----A---- C:\Windows\system32\WMPhoto.dll
2014-04-08 09:34:18 ----A---- C:\Windows\explorer.exe
2014-04-08 09:34:17 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-04-08 09:34:13 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-04-08 09:34:13 ----A---- C:\Windows\system32\d3d10warp.dll
2014-04-08 09:34:12 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-04-08 09:34:12 ----A---- C:\Windows\system32\d2d1.dll
2014-04-08 09:30:50 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-04-08 09:30:50 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-04-08 09:29:32 ----A---- C:\Windows\system32\spoolsv.exe
2014-04-08 09:29:32 ----A---- C:\Windows\splwow64.exe
2014-04-08 08:47:48 ----D---- C:\Windows\SYSWOW64\Wat
2014-04-08 08:47:48 ----D---- C:\Windows\system32\Wat
2014-04-08 08:25:45 ----A---- C:\Windows\system32\wmploc.DLL
2014-04-08 08:25:43 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-04-08 08:25:42 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-04-08 08:25:37 ----A---- C:\Windows\system32\wmp.dll
2014-04-08 07:14:04 ----D---- C:\Windows\Migration
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-04-08 02:12:22 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-04-08 02:12:21 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-04-08 02:12:21 ----A---- C:\Windows\system32\XpsPrint.dll
2014-04-08 02:12:20 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-04-08 02:12:19 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-04-08 02:12:18 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-04-08 02:12:16 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-04-08 02:12:16 ----A---- C:\Windows\system32\dxgi.dll
2014-04-08 02:12:15 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-04-08 02:12:15 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-04-08 02:12:15 ----A---- C:\Windows\system32\FntCache.dll
2014-04-08 02:12:14 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-04-08 02:12:14 ----A---- C:\Windows\system32\DWrite.dll
2014-04-08 02:12:13 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-04-08 02:12:13 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-04-08 02:12:12 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\d3d10core.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\d3d10.dll
2014-04-08 02:12:10 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-04-08 02:12:10 ----A---- C:\Windows\system32\d3d10_1.dll
2014-04-08 02:12:07 ----A---- C:\Windows\system32\d3d10level9.dll
2014-04-08 02:12:05 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-04-08 02:12:05 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-04-08 02:12:04 ----A---- C:\Windows\system32\UIAnimation.dll
2014-04-08 01:44:15 ----A---- C:\Windows\system32\browserchoice.exe
2014-04-08 01:15:54 ----D---- C:\Windows\system32\MRT
2014-04-08 01:15:48 ----A---- C:\Windows\system32\MRT.exe
2014-04-08 01:13:00 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-04-08 01:13:00 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-04-08 01:12:59 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-04-08 01:12:59 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFx.dll
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFHost.exe
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-04-08 01:05:11 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-04-08 01:05:10 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-04-08 01:05:10 ----A---- C:\Windows\system32\wmi.dll
2014-04-07 19:09:27 ----D---- C:\Users\Maminka\AppData\Roaming\WinRAR
2014-04-07 19:08:39 ----H---- C:\Windows\d80g2144.dat
2014-04-07 18:47:35 ----D---- C:\Users\Maminka\AppData\Roaming\PhotoFiltre 7
2014-04-07 18:44:23 ----D---- C:\Users\Maminka\AppData\Roaming\PhotoFiltre Studio X
2014-04-07 18:31:33 ----D---- C:\Program Files (x86)\Zoner
2014-04-07 18:19:05 ----D---- C:\Users\Maminka\AppData\Roaming\Macromedia
2014-04-07 17:43:16 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-04-07 17:43:16 ----A---- C:\Windows\system32\CPFilters.dll
2014-04-07 17:43:15 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-04-07 17:43:15 ----A---- C:\Windows\system32\sbe.dll
2014-04-07 17:43:12 ----A---- C:\Windows\system32\wwansvc.dll
2014-04-07 17:43:12 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-04-07 17:43:10 ----A---- C:\Windows\system32\win32k.sys
2014-04-07 17:42:36 ----A---- C:\Windows\system32\KernelBase.dll
2014-04-07 17:42:35 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\winsrv.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\smss.exe
2014-04-07 17:42:35 ----A---- C:\Windows\system32\csrsrv.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\conhost.exe
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-04-07 17:42:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-04-07 17:42:32 ----A---- C:\Windows\system32\apisetschema.dll
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-04-07 17:42:24 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\system32\RMActivate.exe
2014-04-07 17:42:23 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-04-07 17:42:23 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-04-07 17:42:23 ----A---- C:\Windows\system32\secproc_isv.dll
2014-04-07 17:42:23 ----A---- C:\Windows\system32\secproc.dll
2014-04-07 17:42:23 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-04-07 17:42:23 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\msdrm.dll
2014-04-07 17:40:39 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-04-07 17:40:39 ----A---- C:\Windows\system32\xmllite.dll
2014-04-07 17:40:30 ----A---- C:\Windows\system32\wintrust.dll
2014-04-07 17:40:29 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-04-07 17:40:04 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-04-07 17:40:04 ----A---- C:\Windows\system32\msieftp.dll
2014-04-07 17:40:02 ----A---- C:\Windows\system32\odbccr32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbctrac.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbccu32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbccp32.dll
2014-04-07 17:39:52 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-04-07 17:39:52 ----A---- C:\Windows\system32\poqexec.exe
2014-04-07 17:39:41 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-04-07 17:39:41 ----A---- C:\Windows\system32\mstscax.dll
2014-04-07 17:39:40 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-04-07 17:39:40 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-04-07 17:39:40 ----A---- C:\Windows\system32\tsgqec.dll
2014-04-07 17:39:40 ----A---- C:\Windows\system32\aaclient.dll
2014-04-07 17:39:13 ----A---- C:\Windows\system32\comctl32.dll
2014-04-07 17:39:12 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-04-07 17:39:05 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-04-07 17:38:45 ----A---- C:\Windows\system32\tquery.dll
2014-04-07 17:38:45 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-04-07 17:38:45 ----A---- C:\Windows\system32\mssrch.dll
2014-04-07 17:38:44 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-04-07 17:38:44 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-04-07 17:38:44 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssvp.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssphtb.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssph.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-04-07 17:38:41 ----A---- C:\Windows\system32\msscntrs.dll
2014-04-07 17:38:22 ----A---- C:\Windows\system32\consent.exe
2014-04-07 17:38:22 ----A---- C:\Windows\system32\appinfo.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\cryptsvc.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\cryptnet.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\crypt32.dll
2014-04-07 17:36:58 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-04-07 17:36:58 ----A---- C:\Windows\system32\ntshrui.dll
2014-04-07 17:36:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-04-07 17:36:52 ----A---- C:\Windows\system32\webio.dll
2014-04-07 17:36:29 ----A---- C:\Windows\system32\quartz.dll
2014-04-07 17:36:28 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-04-07 17:36:28 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-04-07 17:36:28 ----A---- C:\Windows\system32\qdvd.dll
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-04-07 17:36:17 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-04-07 17:36:17 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-04-07 17:35:58 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-04-07 17:35:58 ----A---- C:\Windows\system32\wer.dll
2014-04-07 17:35:56 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-04-07 17:35:56 ----A---- C:\Windows\system32\imagehlp.dll
2014-04-07 17:35:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-04-07 17:35:47 ----A---- C:\Windows\system32\tzres.dll
2014-04-07 17:35:11 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-04-07 17:35:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\schannel.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\ncrypt.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\cng.sys
2014-04-07 17:35:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-04-07 17:35:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\sspisrv.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\sspicli.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\secur32.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\lsass.exe
2014-04-07 17:35:10 ----A---- C:\Windows\system32\lsasrv.dll
2014-04-07 17:34:56 ----A---- C:\Windows\system32\drivers\usbser.sys
2014-04-07 17:33:01 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-04-07 17:32:58 ----A---- C:\Windows\system32\mfc42u.dll
2014-04-07 17:32:58 ----A---- C:\Windows\system32\mfc42.dll
2014-04-07 17:32:57 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-04-07 17:32:57 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-04-07 17:32:41 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\nlasvc.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\netcorehc.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\ncsi.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\nlaapi.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\netevent.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\credui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\authui.dll
2014-04-07 17:31:34 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-04-07 17:31:34 ----A---- C:\Windows\system32\atmfd.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\lpk.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\fontsub.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\dciman32.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\atmlib.dll
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-04-07 17:31:18 ----A---- C:\Windows\system32\d3d11.dll
2014-04-07 17:31:17 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-04-07 17:30:56 ----A---- C:\Windows\system32\WebClnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-04-07 17:30:55 ----A---- C:\Windows\system32\davclnt.dll
2014-04-07 17:30:44 ----A---- C:\Windows\system32\drivers\usbscan.sys
2014-04-07 17:30:44 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-04-07 17:30:43 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-04-07 17:30:35 ----A---- C:\Windows\system32\profsvc.dll
2014-04-07 17:30:28 ----A---- C:\Windows\system32\dnsapi.dll
2014-04-07 17:30:27 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-04-07 17:30:27 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-04-07 17:30:27 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-04-07 17:30:27 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-04-07 17:28:48 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-04-07 17:28:48 ----A---- C:\Windows\system32\dpnet.dll
2014-04-07 17:28:40 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-04-07 17:28:08 ----A---- C:\Windows\system32\Wpc.dll
2014-04-07 17:28:08 ----A---- C:\Windows\system32\gameux.dll
2014-04-07 17:28:07 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-04-07 17:28:07 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srv.sys
2014-04-07 17:26:39 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-04-07 17:26:07 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-04-07 17:26:07 ----A---- C:\Windows\system32\mswsock.dll
2014-04-07 17:26:01 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-04-07 17:25:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-04-07 17:25:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-04-07 17:25:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-04-07 17:25:52 ----A---- C:\Windows\system32\advapi32.dll
2014-04-07 17:25:51 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-04-07 17:25:51 ----A---- C:\Windows\system32\tdh.dll
2014-04-07 17:25:51 ----A---- C:\Windows\system32\ntdll.dll
2014-04-07 17:25:50 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-04-07 17:25:49 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-04-07 17:25:40 ----A---- C:\Windows\system32\psisdecd.dll
2014-04-07 17:25:39 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-04-07 17:25:35 ----A---- C:\Windows\system32\kerberos.dll
2014-04-07 17:25:33 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-04-07 17:22:40 ----A---- C:\Windows\system32\msi.dll
2014-04-07 17:22:39 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-04-07 17:22:07 ----A---- C:\Windows\system32\shell32.dll
2014-04-07 17:22:05 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-04-07 17:22:03 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-04-07 17:22:03 ----A---- C:\Windows\system32\shdocvw.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\winresume.exe
2014-04-07 17:21:40 ----A---- C:\Windows\system32\winload.exe
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kdusb.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kdcom.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kd1394.dll
2014-04-07 17:21:35 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-04-07 17:21:35 ----A---- C:\Windows\system32\synceng.dll
2014-04-07 17:21:31 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-04-07 17:21:31 ----A---- C:\Windows\system32\win32spl.dll
2014-04-07 17:21:01 ----A---- C:\Windows\system32\qedit.dll
2014-04-07 17:21:00 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-04-07 17:20:52 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-04-07 17:20:52 ----A---- C:\Windows\system32\cryptdlg.dll
2014-04-07 17:20:00 ----A---- C:\Windows\system32\certutil.exe
2014-04-07 17:19:59 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-04-07 17:19:58 ----A---- C:\Windows\system32\certenc.dll
2014-04-07 17:19:57 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-04-07 17:18:50 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-04-07 17:18:49 ----A---- C:\Windows\system32\cdosys.dll
2014-04-07 17:18:35 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\netapi32.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\browser.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\browcli.dll
2014-04-07 17:18:34 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-04-07 17:18:22 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-04-07 17:18:22 ----A---- C:\Windows\system32\gdi32.dll
2014-04-07 17:18:10 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-04-07 17:18:10 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-04-07 17:18:05 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-04-07 17:02:48 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-04-07 17:02:48 ----A---- C:\Windows\system32\msxml3.dll
2014-04-07 17:02:47 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-04-07 17:02:47 ----A---- C:\Windows\system32\msxml3r.dll
2014-04-07 17:02:28 ----A---- C:\Windows\system32\drivers\afd.sys
2014-04-07 16:54:04 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-04-07 16:54:02 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-04-07 16:51:27 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-04-07 16:50:42 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-04-07 16:50:42 ----A---- C:\Windows\system32\rpcrt4.dll
2014-04-07 16:50:35 ----A---- C:\Windows\system32\msxml6.dll
2014-04-07 16:50:33 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-04-07 16:50:30 ----A---- C:\Windows\system32\Wdfres.dll
2014-04-07 16:50:30 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-04-07 16:50:30 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-04-07 16:50:20 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-04-07 16:50:19 ----A---- C:\Windows\system32\rdpwsx.dll
2014-04-07 16:50:19 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-04-07 16:50:16 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-04-07 16:40:11 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-04-07 16:40:11 ----A---- C:\Windows\system32\usp10.dll
2014-04-07 16:37:22 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-04-07 16:37:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-04-07 16:37:14 ----A---- C:\Windows\system32\drivers\netio.sys
2014-04-07 16:34:10 ----A---- C:\Windows\system32\taskhost.exe
2014-04-07 16:34:06 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-04-07 16:34:02 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-07 16:34:02 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-07 16:33:59 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-04-07 16:33:55 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-04-07 16:33:55 ----A---- C:\Windows\system32\srcore.dll
2014-04-07 16:33:52 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-04-07 16:33:52 ----A---- C:\Windows\system32\prevhost.exe
2014-04-07 16:33:49 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-04-07 16:32:16 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-04-07 16:32:16 ----A---- C:\Windows\system32\inetcomm.dll
2014-04-07 16:32:11 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-04-07 16:32:11 ----A---- C:\Windows\system32\msvcrt.dll
2014-04-07 16:32:04 ----A---- C:\Windows\system32\cscript.exe
2014-04-07 16:31:59 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-04-07 16:31:59 ----A---- C:\Windows\system32\scrrun.dll
2014-04-07 16:31:58 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-04-07 16:31:58 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-04-07 16:31:58 ----A---- C:\Windows\system32\wscript.exe
2014-04-07 16:31:42 ----A---- C:\Windows\system32\localspl.dll
2014-04-07 16:31:35 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-04-07 16:31:27 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-04-07 16:31:27 ----A---- C:\Windows\system32\oleacc.dll
2014-04-07 16:31:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-04-07 16:31:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-04-07 16:28:38 ----A---- C:\Windows\system32\EncDec.dll
2014-04-07 16:28:37 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-04-07 16:28:28 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-04-07 16:28:27 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-04-07 16:28:27 ----A---- C:\Windows\system32\cdd.dll
2014-04-07 16:27:10 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-04-07 16:27:10 ----A---- C:\Windows\system32\packager.dll
2014-04-07 16:06:49 ----D---- C:\Program Files\Common Files\CANON
2014-04-07 16:02:32 ----D---- C:\Program Files\Canon
2014-04-07 15:56:38 ----HD---- C:\ProgramData\CanonBJ
2014-04-07 15:55:09 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2014-04-07 15:54:53 ----D---- C:\Users\Maminka\AppData\Roaming\PC Suite
2014-04-07 15:54:46 ----D---- C:\Users\Maminka\AppData\Roaming\Nokia
2014-04-07 15:54:43 ----D---- C:\ProgramData\PC Suite
2014-04-07 15:54:23 ----A---- C:\Windows\system32\CNC250L.dll
2014-04-07 15:54:22 ----A---- C:\Windows\system32\CNC250I.dll
2014-04-07 15:54:22 ----A---- C:\Windows\system32\CNC250C.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNHMCA.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNC250U.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNC250L.dll
2014-04-07 15:54:21 ----A---- C:\Windows\system32\CNHMCA6.dll
2014-04-07 15:51:46 ----A---- C:\Windows\system32\CNC250O.dll
2014-04-07 15:51:41 ----A---- C:\Windows\system32\CNMIU9W.DLL
2014-04-07 15:51:27 ----HD---- C:\Program Files\CanonBJ
2014-04-07 15:50:00 ----D---- C:\Program Files (x86)\Canon
2014-04-07 15:45:06 ----A---- C:\Windows\system32\nshwfp.dll
2014-04-07 15:45:06 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-04-07 15:45:06 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-04-07 15:45:05 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-04-07 15:45:05 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-04-07 15:44:49 ----D---- C:\Program Files\DIFX
2014-04-07 15:44:43 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-04-07 15:44:31 ----DC---- C:\Windows\system32\DRVSTORE
2014-04-07 15:43:50 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-04-07 15:43:47 ----A---- C:\Windows\system32\scavengeui.dll
2014-04-07 15:41:55 ----A---- C:\Windows\system32\nmwcdclsX64.dll
2014-04-07 15:41:53 ----D---- C:\Program Files (x86)\Nokia
2014-04-07 15:35:42 ----D---- C:\ProgramData\Installations
2014-04-07 15:20:33 ----D---- C:\Users\Maminka\AppData\Roaming\VS Revo Group
2014-04-07 14:51:52 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-04-07 14:50:16 ----D---- C:\Program Files (x86)\Google
2014-04-07 14:48:43 ----D---- C:\Users\Maminka\AppData\Roaming\Adobe
2014-04-07 14:42:40 ----D---- C:\ProgramData\ESET
2014-04-07 14:42:39 ----D---- C:\Program Files\ESET
2014-04-07 14:40:02 ----D---- C:\Users\Maminka\AppData\Roaming\TuneUp Software
2014-04-07 14:37:20 ----D---- C:\Program Files\WinRAR
2014-04-07 14:36:37 ----D---- C:\Zaloha
2014-04-07 14:32:38 ----D---- C:\Program Files (x86)\PhotoFiltre
2014-04-07 14:20:17 ----D---- C:\Program Files (x86)\Microsoft Works
2014-04-07 14:19:26 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2014-04-07 14:18:36 ----D---- C:\Windows\PCHEALTH
2014-04-07 14:18:35 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-04-07 14:14:31 ----D---- C:\Program Files\Microsoft Office
2014-04-07 14:14:21 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-04-07 14:13:02 ----D---- C:\ProgramData\Microsoft Help
2014-04-07 14:13:02 ----D---- C:\Program Files (x86)\Microsoft Office
2014-04-07 14:12:40 ----RHD---- C:\MSOCache
2014-04-07 14:11:03 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-04-07 14:11:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-04-07 14:10:59 ----D---- C:\Windows\system32\Macromed
2014-04-07 14:09:55 ----D---- C:\Users\Maminka\AppData\Roaming\vlc
2014-04-07 14:09:26 ----D---- C:\Program Files (x86)\VideoLAN
2014-04-07 14:08:42 ----D---- C:\Users\Maminka\AppData\Roaming\Skype
2014-04-07 14:08:26 ----RD---- C:\Program Files (x86)\Skype
2014-04-07 14:08:21 ----D---- C:\ProgramData\Skype
2014-04-07 14:06:57 ----A---- C:\Windows\SYSWOW64\unrar.dll
2014-04-07 14:06:57 ----A---- C:\Windows\system32\unrar64.dll
2014-04-07 14:06:48 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-04-07 14:04:17 ----D---- C:\Program Files (x86)\Adobe
2014-04-07 14:03:53 ----D---- C:\Program Files (x86)\Logitech
2014-04-07 14:03:27 ----D---- C:\ProgramData\Adobe
2014-04-07 14:03:25 ----D---- C:\Users\Maminka\AppData\Roaming\Leadertech
2014-04-07 14:02:11 ----D---- C:\Windows\Panther
2014-04-07 14:02:01 ----A---- C:\Windows\SYSWOW64\LVUI2RC.dll
2014-04-07 14:02:01 ----A---- C:\Windows\SYSWOW64\LVUI2.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\LVUIRC64.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\LVUI64.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\lvcoin64.ini
2014-04-07 14:02:00 ----A---- C:\Windows\SYSWOW64\lvcodec2.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\lvcod64.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\lvco1201278.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\drivers\LV561V64.sys
2014-04-07 14:01:59 ----RASH---- C:\BOOTSECT.BAK
2014-04-07 14:01:56 ----SHD---- C:\Boot
2014-04-07 14:01:24 ----D---- C:\Program Files\Common Files\LogiShrd
2014-04-07 14:01:23 ----D---- C:\ProgramData\LogiShrd
2014-04-07 14:01:23 ----D---- C:\Program Files\Logitech
2014-04-07 13:41:51 ----SHD---- C:\System Volume Information
2014-04-07 13:39:04 ----D---- C:\Program Files (x86)\InstallShield Installation Information
2014-04-07 13:33:47 ----N---- C:\Windows\difxapi.dll
2014-04-07 13:33:47 ----D---- C:\Program Files (x86)\VIA
2014-04-07 13:33:19 ----SHD---- C:\Windows\Installer
2014-04-07 13:27:38 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-04-07 13:27:38 ----A---- C:\Windows\system32\rdpcore.dll
2014-04-07 13:27:38 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-04-07 13:24:32 ----D---- C:\ProgramData\DriverGenius
2014-04-07 13:22:29 ----D---- C:\Program Files (x86)\Driver-Soft
2014-04-07 13:21:57 ----D---- C:\Users\Maminka\AppData\Roaming\GHISLER
2014-04-07 13:21:57 ----D---- C:\totalcmd
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wups2.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wucltux.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wuaueng.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wuauclt.exe
2014-04-07 13:17:39 ----A---- C:\Windows\system32\wups.dll
2014-04-07 13:17:39 ----A---- C:\Windows\system32\wudriver.dll
2014-04-07 13:17:38 ----A---- C:\Windows\system32\wuapi.dll
2014-04-07 13:16:59 ----A---- C:\Windows\system32\wuwebv.dll
2014-04-07 13:16:59 ----A---- C:\Windows\system32\wuapp.exe
2014-04-07 13:16:45 ----D---- C:\Users\Maminka\AppData\Roaming\Identities
2014-04-07 13:15:38 ----SD---- C:\Users\Maminka\AppData\Roaming\Microsoft
2014-04-07 13:15:38 ----D---- C:\Users\Maminka\AppData\Roaming\Media Center Programs
2014-04-07 13:15:18 ----SHD---- C:\Recovery
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Šablony
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Plocha
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Oblíbené položky
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Nabídka Start
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Dokumenty
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Data aplikací
2014-04-07 13:08:45 ----D---- C:\Windows\SoftwareDistribution
2014-04-07 13:05:30 ----D---- C:\Windows\Prefetch
2014-04-07 13:03:26 ----ASH---- C:\pagefile.sys
2014-04-07 13:03:25 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-04-23 10:18:12 ----D---- C:\Windows\Temp
2014-04-23 10:17:54 ----RD---- C:\Program Files
2014-04-23 09:40:09 ----D---- C:\Windows\system32\config
2014-04-23 08:00:33 ----D---- C:\Windows\SysWOW64
2014-04-23 07:52:55 ----D---- C:\Windows\system32\Tasks
2014-04-23 00:02:29 ----D---- C:\Windows\system32\drivers
2014-04-23 00:02:28 ----D---- C:\Windows\inf
2014-04-23 00:02:25 ----D---- C:\Windows\system32\catroot
2014-04-23 00:02:24 ----D---- C:\Windows\system32\DriverStore
2014-04-23 00:01:45 ----D---- C:\Windows\System32
2014-04-23 00:01:43 ----D---- C:\Windows
2014-04-22 23:07:28 ----D---- C:\Windows\winsxs
2014-04-22 23:02:01 ----HD---- C:\ProgramData
2014-04-22 16:01:04 ----D---- C:\Windows\Tasks
2014-04-22 16:01:04 ----D---- C:\Windows\system32\wfp
2014-04-22 16:01:00 ----D---- C:\Windows\system32\wbem
2014-04-22 16:00:05 ----D---- C:\Windows\system32\catroot2
2014-04-22 16:00:01 ----D---- C:\Windows\AppCompat
2014-04-22 15:59:43 ----D---- C:\Windows\registration
2014-04-22 15:02:23 ----D---- C:\Windows\Logs
2014-04-22 15:02:23 ----D---- C:\Windows\debug
2014-04-22 00:45:59 ----A---- C:\Windows\win.ini
2014-04-22 00:45:23 ----RSD---- C:\Windows\assembly
2014-04-21 09:55:14 ----RD---- C:\Program Files (x86)
2014-04-21 09:50:14 ----RSD---- C:\Windows\Fonts
2014-04-20 20:42:46 ----SD---- C:\ProgramData\Microsoft
2014-04-15 19:04:01 ----D---- C:\Windows\rescache
2014-04-15 18:00:25 ----D---- C:\Program Files\Internet Explorer
2014-04-15 18:00:24 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-15 18:00:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-15 18:00:22 ----D---- C:\Windows\system32\cs-CZ
2014-04-15 18:00:22 ----D---- C:\Windows\PolicyDefinitions
2014-04-15 18:00:21 ----D---- C:\Windows\system32\en-US
2014-04-15 18:00:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-15 08:43:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-10 10:10:42 ----D---- C:\Windows\AppPatch
2014-04-09 11:57:02 ----D---- C:\Windows\Microsoft.NET
2014-04-09 09:36:25 ----D---- C:\Windows\SYSWOW64\migration
2014-04-09 09:36:18 ----D---- C:\Windows\system32\migration
2014-04-08 08:58:52 ----D---- C:\Windows\system32\wdi
2014-04-08 08:49:13 ----D---- C:\Program Files\Windows Media Player
2014-04-08 08:49:13 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-08 08:49:08 ----D---- C:\Program Files\Common Files\System
2014-04-08 08:49:04 ----D---- C:\Windows\ehome
2014-04-08 08:48:43 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-04-08 08:48:42 ----D---- C:\Program Files\Windows Defender
2014-04-08 08:48:42 ----D---- C:\Program Files (x86)\Windows Defender
2014-04-08 08:48:33 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-04-08 08:48:33 ----D---- C:\Windows\SYSWOW64\it-IT
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\es-ES
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\el-GR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\de-DE
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\da-DK
2014-04-08 08:48:29 ----D---- C:\Windows\system32\zh-HK
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pt-PT
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pt-BR
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pl-PL
2014-04-08 08:48:29 ----D---- C:\Windows\system32\ko-KR
2014-04-08 08:48:29 ----D---- C:\Windows\system32\it-IT
2014-04-08 08:48:29 ----D---- C:\Windows\system32\hu-HU
2014-04-08 08:48:29 ----D---- C:\Windows\system32\el-GR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\tr-TR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\sv-SE
2014-04-08 08:48:28 ----D---- C:\Windows\system32\nl-NL
2014-04-08 08:48:28 ----D---- C:\Windows\system32\fr-FR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\fi-FI
2014-04-08 08:48:28 ----D---- C:\Windows\system32\es-ES
2014-04-08 08:48:27 ----D---- C:\Windows\system32\zh-TW
2014-04-08 08:48:27 ----D---- C:\Windows\system32\zh-CN
2014-04-08 08:48:27 ----D---- C:\Windows\system32\ru-RU
2014-04-08 08:48:27 ----D---- C:\Windows\system32\ja-JP
2014-04-08 08:48:27 ----D---- C:\Windows\system32\de-DE
2014-04-08 08:48:26 ----D---- C:\Windows\system32\nb-NO
2014-04-08 08:48:26 ----D---- C:\Windows\system32\da-DK
2014-04-08 08:47:04 ----D---- C:\Windows\system32\Boot
2014-04-08 08:46:54 ----D---- C:\Program Files\Windows Journal
2014-04-07 16:40:04 ----D---- C:\Windows\system32\LogFiles
2014-04-07 16:06:49 ----D---- C:\Program Files\Common Files
2014-04-07 16:01:11 ----D---- C:\Windows\system32\drivers\UMDF
2014-04-07 15:58:07 ----RSD---- C:\Windows\Media
2014-04-07 15:57:31 ----D---- C:\Windows\twain_32
2014-04-07 15:51:20 ----D---- C:\Program Files (x86)\Common Files
2014-04-07 15:51:04 ----D---- C:\Windows\system32\drivers\etc
2014-04-07 14:20:01 ----D---- C:\Program Files (x86)\MSBuild
2014-04-07 14:19:20 ----D---- C:\Windows\ShellNew
2014-04-07 14:16:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-04-07 13:21:17 ----D---- C:\Windows\system32\CodeIntegrity
2014-04-07 13:16:23 ----SHD---- C:\$Recycle.Bin
2014-04-07 13:15:43 ----D---- C:\Windows\system32\restore
2014-04-07 13:15:34 ----RD---- C:\Users
2014-04-07 13:15:18 ----D---- C:\Windows\system32\Recovery
2014-04-07 13:15:17 ----D---- C:\Program Files\Windows NT
2014-04-07 13:09:13 ----D---- C:\Windows\system32\sysprep
2014-03-31 09:35:08 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-04-23 447888]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-23 208416]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 videX64;videX64; C:\Windows\system32\DRIVERS\videX64.sys [2010-02-11 15000]
R0 xfiltx64;VIA SATA IDE Hot-plug Driver; C:\Windows\system32\DRIVERS\xfiltx64.sys [2010-02-11 26776]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-04-23 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-23 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-23 423240]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-04-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-23 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-23 85328]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 157432]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\fet6x64.sys [2009-06-10 47872]
R3 LVPr2M64;Logitech LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561V64.SYS [2009-05-01 588952]
R3 VIAudio;VIA AC'97 Audio Controller; C:\Windows\system32\drivers\ac97via.sys [2008-01-03 93696]
S3 LVPr2Mon;LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-23 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-04-23 109048]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-09-12 1337752]
R2 LVPrcS64;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 191000]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-07 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-08 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Márty84]

Diky z info

HJT klidne nechte. RSIT si stahlo novou verzi, protoze soucasti jeho logu je i cast z HJT Ale samostatne HJT uz se nekolik let temer nepouziva


Bezi vam tam 2 antiviry! Avast a NOD32. Jeden musite odinstalovat, jinak bude dochazet ke kolizim.

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

[danatoma]

No, ten Avast mám placený a proto jsem ho včera nainstalovala. Chtěla jsem ESET - který mi tam nainstalovali při přeinstalaci na WIN 7, odinstalovat a on nejde - mohu ho jen změnit. Platnost končí někdy v květnu.
Avast odinstalovat už nechci, ale zkusím ESET vypnout - pokud to jde... Zkusím!
A pak bych vložila nový log. Ano?

[Márty84]

OK

[danatoma]

Tak jsem provedla všechno podle návodu a tohle mi vyšlo: (není to moc krátký?)

# AdwCleaner v3.201 - Report created 23/04/2014 at 11:06:47
# Updated 22/04/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Maminka - MAMINKA-PC
# Running from : C:\Users\Maminka\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\driver-soft

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\TENCENT

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Maminka\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [972 octets] - [23/04/2014 10:57:14]
AdwCleaner[R1].txt - [1031 octets] - [23/04/2014 11:03:09]
AdwCleaner[S0].txt - [964 octets] - [23/04/2014 11:06:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1023 octets] ##########

[Márty84]

Cim je tenhle log kratsi, tim je pc cistsi


Jak to dopadlo s tim Esetem, je vypnuty? Hazi pri pokusu o odinstalovani nejakou hlasku? Zkousela jste to i v nouzovem rezimu? Az bude ESET pryc, muzem v klidu cistit

[danatoma]

ESET jsem vypnula na 4 hodiny - a budu to obnovovat furt

Když jdu na odinstalování, tak mi to neukáže odinstalaci, ale jenom obdélníček "ZMĚNIT" - což znamená, abych si ho koupila a to neeeeeeeeeeeeechci...

V nouzovém režimu jsem to nezkoušela - on už má stejně jenom pár dní života a pak půjde do pryč

[Márty84]

Dobra. Jinak kdyby to neslo ani pak, tak muzete pouzit nejaky nastroj, treba pres CCleaner, pripadne Revo, nebo i http://forum.viry.cz/viewtopic.php?f=29&t=103558


Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[danatoma]

Stáhla jsem MBAM, ale je jiný, než na jaký jsem byla zvyklá (červená ikonka) - ale projela jsem a tady je log:

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Scan Date: 23.4.2014
Scan Time: 13:02:08
Logfile: MBAM.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.23.04
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Maminka

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 241887
Time Elapsed: 32 min, 23 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)





PS: Esest je v čudu - použila jsem k odinstalování CCleaner - díky za radu

[Márty84]

Jo, to je ta nejnovejsi verze, ta vypada jinak Na havet je pc cisty, takze muzeme prejit k brzdam a zbytecnostem.


Dejte novy log z RSIT

a k tomu

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).


Odchazim na odpoledni cast sichty, takze kontrolu udelam az vecer, pripadne zitra.

[Márty84]

Zapomnel jsem napsat, ze MBAM muzete odinstalovat, at se tam neplete

[danatoma]

První log z RSITu:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Maminka at 2014-04-23 13:21:39
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 38 GB (50%) free of 76 GB
Total RAM: 1984 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:22:08, on 23.4.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\trend micro\Maminka.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7616 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --flag-switches-begin --flag-switches-end --restore-last-session
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
taskeng.exe {9F3A0B25-481A-45D4-B439-ECC8DE27B595}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"
"C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe" -Embedding
"C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --channel="1332.0.32803764\12797493" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --channel="1332.2.1941814555\1385012373" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --channel="1332.4.283406804\37990574" /prefetch:673131151
"C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
{B1AE2E1C-0A45-4293-8F84-5C6F87F62045}
{A1174C64-B27D-487D-A7C0-DCF1724227A7}
"C:\Program Files\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\wuauclt.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\Program Files\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Maminka\Desktop\RSITx64.exe"
"C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group1 pct:10a stable:r2/ExtensionInstallVerification/None/GoogleNow/Default/OmniboxBundledExperimentV1/StandardR3/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_75/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --enable-software-compositing --disable-gpu-compositing --channel="1332.13.646534499\1007732706" /prefetch:673131151

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-23 581824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-23 436600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-23 3873704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-23 12:20:54 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-04-23 12:18:53 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-04-23 12:18:52 ----D---- C:\ProgramData\Malwarebytes
2014-04-23 12:18:52 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-04-23 12:18:52 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-04-23 12:18:52 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-04-23 10:57:08 ----D---- C:\AdwCleaner
2014-04-23 10:17:54 ----D---- C:\Program Files\trend micro
2014-04-23 10:17:51 ----D---- C:\rsit
2014-04-23 08:34:15 ----D---- C:\Program Files\Revo Uninstaller
2014-04-23 08:11:00 ----D---- C:\Program Files\RegCleaner
2014-04-23 00:03:54 ----D---- C:\Users\Maminka\AppData\Roaming\AVAST Software
2014-04-23 00:01:57 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-04-23 00:01:56 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-04-23 00:01:55 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-23 00:01:55 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-04-23 00:01:54 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-04-23 00:01:54 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-04-23 00:01:53 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-04-23 00:01:45 ----A---- C:\Windows\system32\aswBoot.exe
2014-04-23 00:01:17 ----A---- C:\Windows\avastSS.scr
2014-04-23 00:00:22 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-04-22 23:59:24 ----D---- C:\Program Files\AVAST Software
2014-04-22 23:02:01 ----D---- C:\ProgramData\AVAST Software
2014-04-22 19:14:31 ----D---- C:\Program Files\CCleaner
2014-04-22 06:48:18 ----A---- C:\Windows\system32\CNMLM9W.DLL
2014-04-21 09:55:14 ----D---- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2014-04-20 20:41:40 ----D---- C:\Program Files\Microsoft Silverlight
2014-04-20 20:41:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-04-20 19:51:18 ----D---- C:\Program Files\Search
2014-04-20 08:30:25 ----A---- C:\Windows\IsUninst.exe
2014-04-15 12:05:24 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-15 12:05:24 ----A---- C:\Windows\system32\ieui.dll
2014-04-15 12:05:20 ----A---- C:\Windows\system32\vbscript.dll
2014-04-15 12:05:19 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-15 12:05:05 ----A---- C:\Windows\system32\iernonce.dll
2014-04-15 12:05:05 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-15 12:05:04 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-15 12:05:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-15 12:05:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-15 12:05:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-15 12:05:01 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-15 12:05:00 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\msrating.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-15 12:05:00 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-15 12:04:59 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-15 12:04:59 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-15 12:04:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-15 12:04:58 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-15 12:04:58 ----A---- C:\Windows\system32\iesetup.dll
2014-04-15 12:04:57 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-15 12:04:56 ----A---- C:\Windows\system32\mshtml.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-15 12:04:53 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-15 12:04:53 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-15 12:04:53 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-15 12:04:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-15 12:04:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-15 12:04:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-15 12:04:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-15 12:04:50 ----A---- C:\Windows\system32\iertutil.dll
2014-04-15 12:04:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-15 12:04:49 ----A---- C:\Windows\system32\wininet.dll
2014-04-15 12:04:49 ----A---- C:\Windows\system32\urlmon.dll
2014-04-15 12:04:48 ----A---- C:\Windows\system32\ieframe.dll
2014-04-15 12:04:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-15 12:04:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-04-15 12:04:45 ----A---- C:\Windows\system32\jscript9.dll
2014-04-15 12:04:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-10 10:35:07 ----D---- C:\Program Files\PhotoFiltre Studio
2014-04-09 19:21:41 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-04-09 19:21:41 ----A---- C:\Windows\system32\iologmsg.dll
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\storport.sys
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-04-09 19:21:41 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\wow64win.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\wow64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\ntvdm64.dll
2014-04-09 19:21:32 ----A---- C:\Windows\system32\kernel32.dll
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\user.exe
2014-04-09 19:21:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-04-09 19:21:31 ----A---- C:\Windows\system32\wow64cpu.dll
2014-04-09 19:21:29 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-04-09 01:01:49 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-04-09 00:55:12 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-04-09 00:54:59 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-04-09 00:54:59 ----A---- C:\Windows\system32\elshyph.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\url.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-04-09 00:54:57 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-04-09 00:54:56 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-04-09 00:54:51 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-09 00:54:51 ----A---- C:\Windows\system32\jsIntl.dll
2014-04-09 00:54:50 ----A---- C:\Windows\system32\msls31.dll
2014-04-09 00:54:49 ----A---- C:\Windows\system32\msfeedssync.exe
2014-04-09 00:54:49 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-04-09 00:54:48 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-04-09 00:54:48 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-04-09 00:54:47 ----A---- C:\Windows\system32\mshtmler.dll
2014-04-09 00:54:47 ----A---- C:\Windows\system32\iesysprep.dll
2014-04-09 00:54:44 ----A---- C:\Windows\system32\ieapfltr.dat
2014-04-09 00:54:44 ----A---- C:\Windows\system32\icardie.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\url.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-04-09 00:54:43 ----A---- C:\Windows\system32\iedkcs32.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\webcheck.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\mshtmled.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\licmgr10.dll
2014-04-09 00:54:42 ----A---- C:\Windows\system32\inseng.dll
2014-04-09 00:54:41 ----A---- C:\Windows\system32\wextract.exe
2014-04-09 00:54:41 ----A---- C:\Windows\system32\iexpress.exe
2014-04-09 00:54:35 ----A---- C:\Windows\system32\pngfilt.dll
2014-04-09 00:54:35 ----A---- C:\Windows\system32\occache.dll
2014-04-09 00:54:34 ----A---- C:\Windows\system32\mshta.exe
2014-04-09 00:54:33 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\jscript.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\imgutil.dll
2014-04-09 00:54:33 ----A---- C:\Windows\system32\iepeers.dll
2014-04-09 00:15:29 ----D---- C:\Users\Maminka\AppData\Roaming\AV Bros Page Curl Pro 2.2 DEMO (64 Bit)
2014-04-08 09:34:48 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-04-08 09:34:48 ----A---- C:\Windows\system32\fsutil.exe
2014-04-08 09:34:48 ----A---- C:\Windows\system32\esent.dll
2014-04-08 09:34:48 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-04-08 09:34:47 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-04-08 09:34:47 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-04-08 09:34:20 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-04-08 09:34:20 ----A---- C:\Windows\system32\WMPhoto.dll
2014-04-08 09:34:18 ----A---- C:\Windows\explorer.exe
2014-04-08 09:34:17 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-04-08 09:34:13 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-04-08 09:34:13 ----A---- C:\Windows\system32\d3d10warp.dll
2014-04-08 09:34:12 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-04-08 09:34:12 ----A---- C:\Windows\system32\d2d1.dll
2014-04-08 09:30:50 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-04-08 09:30:50 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-04-08 09:29:32 ----A---- C:\Windows\system32\spoolsv.exe
2014-04-08 09:29:32 ----A---- C:\Windows\splwow64.exe
2014-04-08 08:47:48 ----D---- C:\Windows\SYSWOW64\Wat
2014-04-08 08:47:48 ----D---- C:\Windows\system32\Wat
2014-04-08 08:25:45 ----A---- C:\Windows\system32\wmploc.DLL
2014-04-08 08:25:43 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-04-08 08:25:42 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-04-08 08:25:37 ----A---- C:\Windows\system32\wmp.dll
2014-04-08 07:14:04 ----D---- C:\Windows\Migration
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-04-08 02:12:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-04-08 02:12:23 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-04-08 02:12:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-04-08 02:12:22 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-04-08 02:12:21 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-04-08 02:12:21 ----A---- C:\Windows\system32\XpsPrint.dll
2014-04-08 02:12:20 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-04-08 02:12:19 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-04-08 02:12:18 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-04-08 02:12:16 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-04-08 02:12:16 ----A---- C:\Windows\system32\dxgi.dll
2014-04-08 02:12:15 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-04-08 02:12:15 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-04-08 02:12:15 ----A---- C:\Windows\system32\FntCache.dll
2014-04-08 02:12:14 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-04-08 02:12:14 ----A---- C:\Windows\system32\DWrite.dll
2014-04-08 02:12:13 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-04-08 02:12:13 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-04-08 02:12:12 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\d3d10core.dll
2014-04-08 02:12:11 ----A---- C:\Windows\system32\d3d10.dll
2014-04-08 02:12:10 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-04-08 02:12:10 ----A---- C:\Windows\system32\d3d10_1.dll
2014-04-08 02:12:07 ----A---- C:\Windows\system32\d3d10level9.dll
2014-04-08 02:12:05 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-04-08 02:12:05 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-04-08 02:12:04 ----A---- C:\Windows\system32\UIAnimation.dll
2014-04-08 01:44:15 ----A---- C:\Windows\system32\browserchoice.exe
2014-04-08 01:15:54 ----D---- C:\Windows\system32\MRT
2014-04-08 01:15:48 ----A---- C:\Windows\system32\MRT.exe
2014-04-08 01:13:00 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-04-08 01:13:00 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-04-08 01:12:59 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-04-08 01:12:59 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFx.dll
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFHost.exe
2014-04-08 01:12:58 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-04-08 01:05:11 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-04-08 01:05:10 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-04-08 01:05:10 ----A---- C:\Windows\system32\wmi.dll
2014-04-07 19:09:27 ----D---- C:\Users\Maminka\AppData\Roaming\WinRAR
2014-04-07 19:08:39 ----H---- C:\Windows\d80g2144.dat
2014-04-07 18:47:35 ----D---- C:\Users\Maminka\AppData\Roaming\PhotoFiltre 7
2014-04-07 18:44:23 ----D---- C:\Users\Maminka\AppData\Roaming\PhotoFiltre Studio X
2014-04-07 18:31:33 ----D---- C:\Program Files (x86)\Zoner
2014-04-07 18:19:05 ----D---- C:\Users\Maminka\AppData\Roaming\Macromedia
2014-04-07 17:43:16 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-04-07 17:43:16 ----A---- C:\Windows\system32\CPFilters.dll
2014-04-07 17:43:15 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-04-07 17:43:15 ----A---- C:\Windows\system32\sbe.dll
2014-04-07 17:43:12 ----A---- C:\Windows\system32\wwansvc.dll
2014-04-07 17:43:12 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-04-07 17:43:10 ----A---- C:\Windows\system32\win32k.sys
2014-04-07 17:42:36 ----A---- C:\Windows\system32\KernelBase.dll
2014-04-07 17:42:35 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\winsrv.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\smss.exe
2014-04-07 17:42:35 ----A---- C:\Windows\system32\csrsrv.dll
2014-04-07 17:42:35 ----A---- C:\Windows\system32\conhost.exe
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-04-07 17:42:34 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-04-07 17:42:33 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-04-07 17:42:32 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-04-07 17:42:32 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-04-07 17:42:32 ----A---- C:\Windows\system32\apisetschema.dll
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-04-07 17:42:24 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-04-07 17:42:24 ----A---- C:\Windows\system32\RMActivate.exe
2014-04-07 17:42:23 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-04-07 17:42:23 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-04-07 17:42:23 ----A---- C:\Windows\system32\secproc_isv.dll
2014-04-07 17:42:23 ----A---- C:\Windows\system32\secproc.dll
2014-04-07 17:42:23 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-04-07 17:42:23 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-04-07 17:42:22 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-04-07 17:42:22 ----A---- C:\Windows\system32\msdrm.dll
2014-04-07 17:40:39 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-04-07 17:40:39 ----A---- C:\Windows\system32\xmllite.dll
2014-04-07 17:40:30 ----A---- C:\Windows\system32\wintrust.dll
2014-04-07 17:40:29 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-04-07 17:40:04 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-04-07 17:40:04 ----A---- C:\Windows\system32\msieftp.dll
2014-04-07 17:40:02 ----A---- C:\Windows\system32\odbccr32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbctrac.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbccu32.dll
2014-04-07 17:40:01 ----A---- C:\Windows\system32\odbccp32.dll
2014-04-07 17:39:52 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-04-07 17:39:52 ----A---- C:\Windows\system32\poqexec.exe
2014-04-07 17:39:41 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-04-07 17:39:41 ----A---- C:\Windows\system32\mstscax.dll
2014-04-07 17:39:40 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-04-07 17:39:40 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-04-07 17:39:40 ----A---- C:\Windows\system32\tsgqec.dll
2014-04-07 17:39:40 ----A---- C:\Windows\system32\aaclient.dll
2014-04-07 17:39:13 ----A---- C:\Windows\system32\comctl32.dll
2014-04-07 17:39:12 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-04-07 17:39:05 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-04-07 17:39:05 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-04-07 17:38:45 ----A---- C:\Windows\system32\tquery.dll
2014-04-07 17:38:45 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-04-07 17:38:45 ----A---- C:\Windows\system32\mssrch.dll
2014-04-07 17:38:44 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-04-07 17:38:44 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-04-07 17:38:44 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-04-07 17:38:43 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssvp.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssphtb.dll
2014-04-07 17:38:42 ----A---- C:\Windows\system32\mssph.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-04-07 17:38:41 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-04-07 17:38:41 ----A---- C:\Windows\system32\msscntrs.dll
2014-04-07 17:38:22 ----A---- C:\Windows\system32\consent.exe
2014-04-07 17:38:22 ----A---- C:\Windows\system32\appinfo.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-04-07 17:37:41 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\cryptsvc.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\cryptnet.dll
2014-04-07 17:37:41 ----A---- C:\Windows\system32\crypt32.dll
2014-04-07 17:36:58 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-04-07 17:36:58 ----A---- C:\Windows\system32\ntshrui.dll
2014-04-07 17:36:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-04-07 17:36:52 ----A---- C:\Windows\system32\webio.dll
2014-04-07 17:36:29 ----A---- C:\Windows\system32\quartz.dll
2014-04-07 17:36:28 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-04-07 17:36:28 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-04-07 17:36:28 ----A---- C:\Windows\system32\qdvd.dll
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-04-07 17:36:24 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-04-07 17:36:17 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-04-07 17:36:17 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-04-07 17:35:58 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-04-07 17:35:58 ----A---- C:\Windows\system32\wer.dll
2014-04-07 17:35:56 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-04-07 17:35:56 ----A---- C:\Windows\system32\imagehlp.dll
2014-04-07 17:35:47 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-04-07 17:35:47 ----A---- C:\Windows\system32\tzres.dll
2014-04-07 17:35:11 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-04-07 17:35:11 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\schannel.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\ncrypt.dll
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-04-07 17:35:11 ----A---- C:\Windows\system32\drivers\cng.sys
2014-04-07 17:35:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-04-07 17:35:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\sspisrv.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\sspicli.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\secur32.dll
2014-04-07 17:35:10 ----A---- C:\Windows\system32\lsass.exe
2014-04-07 17:35:10 ----A---- C:\Windows\system32\lsasrv.dll
2014-04-07 17:34:56 ----A---- C:\Windows\system32\drivers\usbser.sys
2014-04-07 17:33:01 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-04-07 17:32:58 ----A---- C:\Windows\system32\mfc42u.dll
2014-04-07 17:32:58 ----A---- C:\Windows\system32\mfc42.dll
2014-04-07 17:32:57 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-04-07 17:32:57 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-04-07 17:32:41 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\nlasvc.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\netcorehc.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\ncsi.dll
2014-04-07 17:32:41 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-04-07 17:32:40 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\nlaapi.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\netevent.dll
2014-04-07 17:32:40 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\credui.dll
2014-04-07 17:32:14 ----A---- C:\Windows\system32\authui.dll
2014-04-07 17:31:34 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-04-07 17:31:34 ----A---- C:\Windows\system32\atmfd.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-04-07 17:31:33 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\lpk.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\fontsub.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\dciman32.dll
2014-04-07 17:31:33 ----A---- C:\Windows\system32\atmlib.dll
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-04-07 17:31:26 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-04-07 17:31:25 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-04-07 17:31:18 ----A---- C:\Windows\system32\d3d11.dll
2014-04-07 17:31:17 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-04-07 17:30:56 ----A---- C:\Windows\system32\WebClnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-04-07 17:30:55 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-04-07 17:30:55 ----A---- C:\Windows\system32\davclnt.dll
2014-04-07 17:30:44 ----A---- C:\Windows\system32\drivers\usbscan.sys
2014-04-07 17:30:44 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-04-07 17:30:43 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-04-07 17:30:35 ----A---- C:\Windows\system32\profsvc.dll
2014-04-07 17:30:28 ----A---- C:\Windows\system32\dnsapi.dll
2014-04-07 17:30:27 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-04-07 17:30:27 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-04-07 17:30:27 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-04-07 17:30:27 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-04-07 17:28:48 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-04-07 17:28:48 ----A---- C:\Windows\system32\dpnet.dll
2014-04-07 17:28:40 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-04-07 17:28:08 ----A---- C:\Windows\system32\Wpc.dll
2014-04-07 17:28:08 ----A---- C:\Windows\system32\gameux.dll
2014-04-07 17:28:07 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-04-07 17:28:07 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-04-07 17:27:01 ----A---- C:\Windows\system32\drivers\srv.sys
2014-04-07 17:26:39 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-04-07 17:26:07 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-04-07 17:26:07 ----A---- C:\Windows\system32\mswsock.dll
2014-04-07 17:26:01 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-04-07 17:25:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-04-07 17:25:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-04-07 17:25:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-04-07 17:25:52 ----A---- C:\Windows\system32\advapi32.dll
2014-04-07 17:25:51 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-04-07 17:25:51 ----A---- C:\Windows\system32\tdh.dll
2014-04-07 17:25:51 ----A---- C:\Windows\system32\ntdll.dll
2014-04-07 17:25:50 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-04-07 17:25:49 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-04-07 17:25:40 ----A---- C:\Windows\system32\psisdecd.dll
2014-04-07 17:25:39 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-04-07 17:25:35 ----A---- C:\Windows\system32\kerberos.dll
2014-04-07 17:25:33 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-04-07 17:22:40 ----A---- C:\Windows\system32\msi.dll
2014-04-07 17:22:39 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-04-07 17:22:07 ----A---- C:\Windows\system32\shell32.dll
2014-04-07 17:22:05 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-04-07 17:22:03 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-04-07 17:22:03 ----A---- C:\Windows\system32\shdocvw.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\winresume.exe
2014-04-07 17:21:40 ----A---- C:\Windows\system32\winload.exe
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kdusb.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kdcom.dll
2014-04-07 17:21:40 ----A---- C:\Windows\system32\kd1394.dll
2014-04-07 17:21:35 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-04-07 17:21:35 ----A---- C:\Windows\system32\synceng.dll
2014-04-07 17:21:31 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-04-07 17:21:31 ----A---- C:\Windows\system32\win32spl.dll
2014-04-07 17:21:01 ----A---- C:\Windows\system32\qedit.dll
2014-04-07 17:21:00 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-04-07 17:20:52 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-04-07 17:20:52 ----A---- C:\Windows\system32\cryptdlg.dll
2014-04-07 17:20:00 ----A---- C:\Windows\system32\certutil.exe
2014-04-07 17:19:59 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-04-07 17:19:58 ----A---- C:\Windows\system32\certenc.dll
2014-04-07 17:19:57 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-04-07 17:18:50 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-04-07 17:18:49 ----A---- C:\Windows\system32\cdosys.dll
2014-04-07 17:18:35 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\netapi32.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\browser.dll
2014-04-07 17:18:35 ----A---- C:\Windows\system32\browcli.dll
2014-04-07 17:18:34 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-04-07 17:18:22 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-04-07 17:18:22 ----A---- C:\Windows\system32\gdi32.dll
2014-04-07 17:18:10 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-04-07 17:18:10 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-04-07 17:18:05 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-04-07 17:18:04 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-04-07 17:02:48 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-04-07 17:02:48 ----A---- C:\Windows\system32\msxml3.dll
2014-04-07 17:02:47 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-04-07 17:02:47 ----A---- C:\Windows\system32\msxml3r.dll
2014-04-07 17:02:28 ----A---- C:\Windows\system32\drivers\afd.sys
2014-04-07 16:54:04 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-04-07 16:54:02 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-04-07 16:51:27 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-04-07 16:50:42 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-04-07 16:50:42 ----A---- C:\Windows\system32\rpcrt4.dll
2014-04-07 16:50:35 ----A---- C:\Windows\system32\msxml6.dll
2014-04-07 16:50:33 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-04-07 16:50:30 ----A---- C:\Windows\system32\Wdfres.dll
2014-04-07 16:50:30 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-04-07 16:50:30 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-04-07 16:50:20 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-04-07 16:50:19 ----A---- C:\Windows\system32\rdpwsx.dll
2014-04-07 16:50:19 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-04-07 16:50:16 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-04-07 16:40:11 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-04-07 16:40:11 ----A---- C:\Windows\system32\usp10.dll
2014-04-07 16:37:22 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-04-07 16:37:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-04-07 16:37:14 ----A---- C:\Windows\system32\drivers\netio.sys
2014-04-07 16:34:10 ----A---- C:\Windows\system32\taskhost.exe
2014-04-07 16:34:06 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-04-07 16:34:02 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-07 16:34:02 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-07 16:33:59 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-04-07 16:33:55 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-04-07 16:33:55 ----A---- C:\Windows\system32\srcore.dll
2014-04-07 16:33:52 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-04-07 16:33:52 ----A---- C:\Windows\system32\prevhost.exe
2014-04-07 16:33:49 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-04-07 16:32:16 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-04-07 16:32:16 ----A---- C:\Windows\system32\inetcomm.dll
2014-04-07 16:32:11 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-04-07 16:32:11 ----A---- C:\Windows\system32\msvcrt.dll
2014-04-07 16:32:04 ----A---- C:\Windows\system32\cscript.exe
2014-04-07 16:31:59 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-04-07 16:31:59 ----A---- C:\Windows\system32\scrrun.dll
2014-04-07 16:31:58 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-04-07 16:31:58 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-04-07 16:31:58 ----A---- C:\Windows\system32\wscript.exe
2014-04-07 16:31:42 ----A---- C:\Windows\system32\localspl.dll
2014-04-07 16:31:35 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-04-07 16:31:27 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-04-07 16:31:27 ----A---- C:\Windows\system32\oleacc.dll
2014-04-07 16:31:26 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-04-07 16:31:26 ----A---- C:\Windows\system32\oleaut32.dll
2014-04-07 16:28:38 ----A---- C:\Windows\system32\EncDec.dll
2014-04-07 16:28:37 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-04-07 16:28:28 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-04-07 16:28:27 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-04-07 16:28:27 ----A---- C:\Windows\system32\cdd.dll
2014-04-07 16:27:10 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-04-07 16:27:10 ----A---- C:\Windows\system32\packager.dll
2014-04-07 16:06:49 ----D---- C:\Program Files\Common Files\CANON
2014-04-07 16:02:32 ----D---- C:\Program Files\Canon
2014-04-07 15:56:38 ----HD---- C:\ProgramData\CanonBJ
2014-04-07 15:55:09 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2014-04-07 15:54:53 ----D---- C:\Users\Maminka\AppData\Roaming\PC Suite
2014-04-07 15:54:46 ----D---- C:\Users\Maminka\AppData\Roaming\Nokia
2014-04-07 15:54:43 ----D---- C:\ProgramData\PC Suite
2014-04-07 15:54:23 ----A---- C:\Windows\system32\CNC250L.dll
2014-04-07 15:54:22 ----A---- C:\Windows\system32\CNC250I.dll
2014-04-07 15:54:22 ----A---- C:\Windows\system32\CNC250C.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNHMCA.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNC250U.dll
2014-04-07 15:54:21 ----A---- C:\Windows\SYSWOW64\CNC250L.dll
2014-04-07 15:54:21 ----A---- C:\Windows\system32\CNHMCA6.dll
2014-04-07 15:51:46 ----A---- C:\Windows\system32\CNC250O.dll
2014-04-07 15:51:41 ----A---- C:\Windows\system32\CNMIU9W.DLL
2014-04-07 15:51:27 ----HD---- C:\Program Files\CanonBJ
2014-04-07 15:50:00 ----D---- C:\Program Files (x86)\Canon
2014-04-07 15:45:06 ----A---- C:\Windows\system32\nshwfp.dll
2014-04-07 15:45:06 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-04-07 15:45:06 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-04-07 15:45:05 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-04-07 15:45:05 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-04-07 15:44:49 ----D---- C:\Program Files\DIFX
2014-04-07 15:44:43 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
2014-04-07 15:44:31 ----DC---- C:\Windows\system32\DRVSTORE
2014-04-07 15:43:50 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-04-07 15:43:47 ----A---- C:\Windows\system32\scavengeui.dll
2014-04-07 15:41:55 ----A---- C:\Windows\system32\nmwcdclsX64.dll
2014-04-07 15:41:53 ----D---- C:\Program Files (x86)\Nokia
2014-04-07 15:35:42 ----D---- C:\ProgramData\Installations
2014-04-07 15:20:33 ----D---- C:\Users\Maminka\AppData\Roaming\VS Revo Group
2014-04-07 14:51:52 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-04-07 14:50:16 ----D---- C:\Program Files (x86)\Google
2014-04-07 14:48:43 ----D---- C:\Users\Maminka\AppData\Roaming\Adobe
2014-04-07 14:40:02 ----D---- C:\Users\Maminka\AppData\Roaming\TuneUp Software
2014-04-07 14:37:20 ----D---- C:\Program Files\WinRAR
2014-04-07 14:36:37 ----D---- C:\Zaloha
2014-04-07 14:32:38 ----D---- C:\Program Files (x86)\PhotoFiltre
2014-04-07 14:20:17 ----D---- C:\Program Files (x86)\Microsoft Works
2014-04-07 14:19:26 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2014-04-07 14:18:36 ----D---- C:\Windows\PCHEALTH
2014-04-07 14:18:35 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-04-07 14:14:31 ----D---- C:\Program Files\Microsoft Office
2014-04-07 14:14:21 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-04-07 14:13:02 ----D---- C:\ProgramData\Microsoft Help
2014-04-07 14:13:02 ----D---- C:\Program Files (x86)\Microsoft Office
2014-04-07 14:12:40 ----RHD---- C:\MSOCache
2014-04-07 14:11:03 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-04-07 14:11:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-04-07 14:10:59 ----D---- C:\Windows\system32\Macromed
2014-04-07 14:09:55 ----D---- C:\Users\Maminka\AppData\Roaming\vlc
2014-04-07 14:09:26 ----D---- C:\Program Files (x86)\VideoLAN
2014-04-07 14:08:42 ----D---- C:\Users\Maminka\AppData\Roaming\Skype
2014-04-07 14:08:26 ----RD---- C:\Program Files (x86)\Skype
2014-04-07 14:08:21 ----D---- C:\ProgramData\Skype
2014-04-07 14:06:57 ----A---- C:\Windows\SYSWOW64\unrar.dll
2014-04-07 14:06:57 ----A---- C:\Windows\system32\unrar64.dll
2014-04-07 14:06:48 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-04-07 14:04:17 ----D---- C:\Program Files (x86)\Adobe
2014-04-07 14:03:53 ----D---- C:\Program Files (x86)\Logitech
2014-04-07 14:03:27 ----D---- C:\ProgramData\Adobe
2014-04-07 14:03:25 ----D---- C:\Users\Maminka\AppData\Roaming\Leadertech
2014-04-07 14:02:11 ----D---- C:\Windows\Panther
2014-04-07 14:02:01 ----A---- C:\Windows\SYSWOW64\LVUI2RC.dll
2014-04-07 14:02:01 ----A---- C:\Windows\SYSWOW64\LVUI2.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\LVUIRC64.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\LVUI64.dll
2014-04-07 14:02:01 ----A---- C:\Windows\system32\lvcoin64.ini
2014-04-07 14:02:00 ----A---- C:\Windows\SYSWOW64\lvcodec2.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\lvcod64.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\lvco1201278.dll
2014-04-07 14:02:00 ----A---- C:\Windows\system32\drivers\LV561V64.sys
2014-04-07 14:01:59 ----RASH---- C:\BOOTSECT.BAK
2014-04-07 14:01:56 ----SHD---- C:\Boot
2014-04-07 14:01:24 ----D---- C:\Program Files\Common Files\LogiShrd
2014-04-07 14:01:23 ----D---- C:\ProgramData\LogiShrd
2014-04-07 14:01:23 ----D---- C:\Program Files\Logitech
2014-04-07 13:41:51 ----SHD---- C:\System Volume Information
2014-04-07 13:39:04 ----D---- C:\Program Files (x86)\InstallShield Installation Information
2014-04-07 13:33:47 ----N---- C:\Windows\difxapi.dll
2014-04-07 13:33:47 ----D---- C:\Program Files (x86)\VIA
2014-04-07 13:33:19 ----SHD---- C:\Windows\Installer
2014-04-07 13:27:38 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-04-07 13:27:38 ----A---- C:\Windows\system32\rdpcore.dll
2014-04-07 13:27:38 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-04-07 13:24:32 ----D---- C:\ProgramData\DriverGenius
2014-04-07 13:21:57 ----D---- C:\Users\Maminka\AppData\Roaming\GHISLER
2014-04-07 13:21:57 ----D---- C:\totalcmd
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wups2.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wucltux.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wuaueng.dll
2014-04-07 13:18:06 ----A---- C:\Windows\system32\wuauclt.exe
2014-04-07 13:17:39 ----A---- C:\Windows\system32\wups.dll
2014-04-07 13:17:39 ----A---- C:\Windows\system32\wudriver.dll
2014-04-07 13:17:38 ----A---- C:\Windows\system32\wuapi.dll
2014-04-07 13:16:59 ----A---- C:\Windows\system32\wuwebv.dll
2014-04-07 13:16:59 ----A---- C:\Windows\system32\wuapp.exe
2014-04-07 13:16:45 ----D---- C:\Users\Maminka\AppData\Roaming\Identities
2014-04-07 13:15:38 ----SD---- C:\Users\Maminka\AppData\Roaming\Microsoft
2014-04-07 13:15:38 ----D---- C:\Users\Maminka\AppData\Roaming\Media Center Programs
2014-04-07 13:15:18 ----SHD---- C:\Recovery
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Šablony
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Plocha
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Oblíbené položky
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Nabídka Start
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Dokumenty
2014-04-07 13:15:17 ----SHD---- C:\ProgramData\Data aplikací
2014-04-07 13:08:45 ----D---- C:\Windows\SoftwareDistribution
2014-04-07 13:05:30 ----D---- C:\Windows\Prefetch
2014-04-07 13:03:26 ----ASH---- C:\pagefile.sys
2014-04-07 13:03:25 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-04-23 13:21:49 ----D---- C:\Windows\Temp
2014-04-23 13:19:08 ----D---- C:\Windows\system32\config
2014-04-23 13:17:23 ----D---- C:\Windows\system32\wdi
2014-04-23 13:11:04 ----HD---- C:\ProgramData
2014-04-23 13:10:53 ----RD---- C:\Program Files
2014-04-23 13:10:09 ----D---- C:\Windows\system32\DriverStore
2014-04-23 13:10:09 ----D---- C:\Windows\system32\catroot
2014-04-23 13:10:08 ----D---- C:\Windows\system32\drivers
2014-04-23 13:10:08 ----D---- C:\Windows\inf
2014-04-23 11:06:50 ----RD---- C:\Program Files (x86)
2014-04-23 08:00:33 ----D---- C:\Windows\SysWOW64
2014-04-23 07:52:55 ----D---- C:\Windows\system32\Tasks
2014-04-23 00:01:45 ----D---- C:\Windows\System32
2014-04-23 00:01:43 ----D---- C:\Windows
2014-04-22 23:07:28 ----D---- C:\Windows\winsxs
2014-04-22 16:01:04 ----D---- C:\Windows\Tasks
2014-04-22 16:01:04 ----D---- C:\Windows\system32\wfp
2014-04-22 16:01:00 ----D---- C:\Windows\system32\wbem
2014-04-22 16:00:05 ----D---- C:\Windows\system32\catroot2
2014-04-22 16:00:01 ----D---- C:\Windows\AppCompat
2014-04-22 15:59:43 ----D---- C:\Windows\registration
2014-04-22 15:02:23 ----D---- C:\Windows\Logs
2014-04-22 15:02:23 ----D---- C:\Windows\debug
2014-04-22 00:45:59 ----A---- C:\Windows\win.ini
2014-04-22 00:45:23 ----RSD---- C:\Windows\assembly
2014-04-21 09:50:14 ----RSD---- C:\Windows\Fonts
2014-04-20 20:42:46 ----SD---- C:\ProgramData\Microsoft
2014-04-15 19:04:01 ----D---- C:\Windows\rescache
2014-04-15 18:00:25 ----D---- C:\Program Files\Internet Explorer
2014-04-15 18:00:24 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-15 18:00:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-15 18:00:22 ----D---- C:\Windows\system32\cs-CZ
2014-04-15 18:00:22 ----D---- C:\Windows\PolicyDefinitions
2014-04-15 18:00:21 ----D---- C:\Windows\system32\en-US
2014-04-15 18:00:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-15 08:43:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-10 10:10:42 ----D---- C:\Windows\AppPatch
2014-04-09 11:57:02 ----D---- C:\Windows\Microsoft.NET
2014-04-09 09:36:25 ----D---- C:\Windows\SYSWOW64\migration
2014-04-09 09:36:18 ----D---- C:\Windows\system32\migration
2014-04-08 08:49:13 ----D---- C:\Program Files\Windows Media Player
2014-04-08 08:49:13 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-08 08:49:08 ----D---- C:\Program Files\Common Files\System
2014-04-08 08:49:04 ----D---- C:\Windows\ehome
2014-04-08 08:48:43 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-04-08 08:48:42 ----D---- C:\Program Files\Windows Defender
2014-04-08 08:48:42 ----D---- C:\Program Files (x86)\Windows Defender
2014-04-08 08:48:33 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-04-08 08:48:33 ----D---- C:\Windows\SYSWOW64\it-IT
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\es-ES
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\el-GR
2014-04-08 08:48:32 ----D---- C:\Windows\SYSWOW64\de-DE
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-04-08 08:48:31 ----D---- C:\Windows\SYSWOW64\da-DK
2014-04-08 08:48:29 ----D---- C:\Windows\system32\zh-HK
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pt-PT
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pt-BR
2014-04-08 08:48:29 ----D---- C:\Windows\system32\pl-PL
2014-04-08 08:48:29 ----D---- C:\Windows\system32\ko-KR
2014-04-08 08:48:29 ----D---- C:\Windows\system32\it-IT
2014-04-08 08:48:29 ----D---- C:\Windows\system32\hu-HU
2014-04-08 08:48:29 ----D---- C:\Windows\system32\el-GR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\tr-TR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\sv-SE
2014-04-08 08:48:28 ----D---- C:\Windows\system32\nl-NL
2014-04-08 08:48:28 ----D---- C:\Windows\system32\fr-FR
2014-04-08 08:48:28 ----D---- C:\Windows\system32\fi-FI
2014-04-08 08:48:28 ----D---- C:\Windows\system32\es-ES
2014-04-08 08:48:27 ----D---- C:\Windows\system32\zh-TW
2014-04-08 08:48:27 ----D---- C:\Windows\system32\zh-CN
2014-04-08 08:48:27 ----D---- C:\Windows\system32\ru-RU
2014-04-08 08:48:27 ----D---- C:\Windows\system32\ja-JP
2014-04-08 08:48:27 ----D---- C:\Windows\system32\de-DE
2014-04-08 08:48:26 ----D---- C:\Windows\system32\nb-NO
2014-04-08 08:48:26 ----D---- C:\Windows\system32\da-DK
2014-04-08 08:47:04 ----D---- C:\Windows\system32\Boot
2014-04-08 08:46:54 ----D---- C:\Program Files\Windows Journal
2014-04-07 16:40:04 ----D---- C:\Windows\system32\LogFiles
2014-04-07 16:06:49 ----D---- C:\Program Files\Common Files
2014-04-07 16:01:11 ----D---- C:\Windows\system32\drivers\UMDF
2014-04-07 15:58:07 ----RSD---- C:\Windows\Media
2014-04-07 15:57:31 ----D---- C:\Windows\twain_32
2014-04-07 15:51:20 ----D---- C:\Program Files (x86)\Common Files
2014-04-07 15:51:04 ----D---- C:\Windows\system32\drivers\etc
2014-04-07 14:20:01 ----D---- C:\Program Files (x86)\MSBuild
2014-04-07 14:19:20 ----D---- C:\Windows\ShellNew
2014-04-07 14:16:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-04-07 13:21:17 ----D---- C:\Windows\system32\CodeIntegrity
2014-04-07 13:16:23 ----SHD---- C:\$Recycle.Bin
2014-04-07 13:15:43 ----D---- C:\Windows\system32\restore
2014-04-07 13:15:34 ----RD---- C:\Users
2014-04-07 13:15:18 ----D---- C:\Windows\system32\Recovery
2014-04-07 13:15:17 ----D---- C:\Program Files\Windows NT
2014-04-07 13:09:13 ----D---- C:\Windows\system32\sysprep
2014-03-31 09:35:08 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-04-23 447888]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-23 208416]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 videX64;videX64; C:\Windows\system32\DRIVERS\videX64.sys [2010-02-11 15000]
R0 xfiltx64;VIA SATA IDE Hot-plug Driver; C:\Windows\system32\DRIVERS\xfiltx64.sys [2010-02-11 26776]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-04-23 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-23 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-23 423240]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-04-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-23 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-23 85328]
R3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\fet6x64.sys [2009-06-10 47872]
R3 LVPr2M64;Logitech LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-04-03 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-04-23 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-04-03 63192]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561V64.SYS [2009-05-01 588952]
R3 VIAudio;VIA AC'97 Audio Controller; C:\Windows\system32\drivers\ac97via.sys [2008-01-03 93696]
S3 LVPr2Mon;LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-23 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-04-23 109048]
R2 LVPrcS64;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 191000]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-04-03 857912]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-04-03 1809720]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-07 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-08 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[danatoma]

Druhý log z OTL:

OTL Extras logfile created on: 23.4.2014 13:31:15 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Maminka\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17041)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,94 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 50,83% Memory free
3,87 Gb Paging File | 2,59 Gb Available in Paging File | 66,97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,52 Gb Total Space | 37,43 Gb Free Space | 50,22% Space Free | Partition Type: NTFS

Computer Name: MAMINKA-PC | User Name: Maminka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-2195013036-3229993566-630806414-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{048DBD2D-C44C-4D9B-9607-90DEC973C129}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0C35479E-BEAA-4A46-A107-C4266B269DCB}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0EFB8FBD-E99E-485D-B5C7-3F2C6654C3BB}" = rport=139 | protocol=6 | dir=out | app=system |
"{13B3B7BC-9040-462A-85C6-68F4E9EEE14A}" = lport=138 | protocol=17 | dir=in | app=system |
"{1B0E16C0-AEF1-4ECB-9A5D-4FD873245DEC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{1BAC394C-D438-408B-AEDB-0EF9B0673754}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{22C10D52-D7AF-4B03-9F9D-F9715FAB0C47}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{485F9702-E538-40A8-B877-5C230DF3B946}" = rport=445 | protocol=6 | dir=out | app=system |
"{48E44876-30CB-4EAB-A4FA-E982EEAA8084}" = lport=137 | protocol=17 | dir=in | app=system |
"{693ADDEA-F00C-4720-9BF7-0D4C6D25CECD}" = rport=138 | protocol=17 | dir=out | app=system |
"{6F3BA5AA-7BC3-49F3-BB00-1D5A5B28FE0E}" = lport=445 | protocol=6 | dir=in | app=system |
"{702C74E2-68EC-45D7-9D03-2F9DF4856FF4}" = rport=137 | protocol=17 | dir=out | app=system |
"{763971D3-AD3D-4E8A-8BB9-B6C1A947E60D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8B0FCD78-8061-4439-B220-EA3FDE3D7547}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8BA1A3CC-F604-4083-AEFB-EC75070526CC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8EEE4E20-DEDE-4B37-9B6B-509D7A56B567}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{98AE8A66-840D-4D0C-A461-F0F88BEA1F12}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9D70837E-474C-4E77-B97E-28A131248EB3}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A8FF7862-5A1B-48B0-87F2-2A67CE0F593A}" = rport=10243 | protocol=6 | dir=out | app=system |
"{AA48D217-B944-4F5F-B556-136438290F3D}" = lport=139 | protocol=6 | dir=in | app=system |
"{B0AD3847-13BD-4B87-A905-5F9E76DB17CE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F00EEB73-C037-4A55-94DB-E7B61AD28868}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F6D1E131-2084-4992-83A3-1C39BC68BBBA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F93388C2-11CA-4ECC-9FF3-5A1CC759E4FA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00118569-DEA0-4645-9955-B2FDFEB8A339}" = protocol=17 | dir=in | app=c:\program files (x86)\logitech\logitech vid\vid.exe |
"{04579711-621E-4207-9550-3C6BE7F0EF26}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{06B777B0-005A-478E-B215-B8034DDE72FA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{103E857A-4E63-4BF4-A767-684E23282381}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{13D872E8-EDCD-4A3B-A370-0A15339EBB7A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3879BA42-D5A1-4E5E-B13C-DDA727A0586F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{55A8567E-5CAA-4B0F-89FA-B4A3A16EF37A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{57CB97AF-EF45-469D-8761-B9A2ADE6521C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{59AE0D75-193F-4E42-A621-C72080981E0C}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5A6F57AB-2007-4461-909E-19A1CED541A7}" = protocol=58 | dir=in | app=system |
"{5D188A36-699B-47D8-8559-6773CE18A806}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{605B3F95-7307-4C2C-BD5C-94491BE535D1}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{694B6C09-696F-416A-B244-138E3E4DA871}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{7D91EF15-644D-43C7-9333-B4643D05B371}" = protocol=6 | dir=out | app=system |
"{8520AE7E-68D0-4867-BE77-62C79F288AFA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{89FB2F24-1DAB-4601-966D-5D0FE99B0251}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A2125EBC-C688-44CB-B125-3F4DD51D060F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A21E128F-7CA9-4E58-A887-F34A79779B96}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A385EC6B-D2E7-45C6-AD18-DBCA994F505F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A7AA807D-3100-4543-B4E2-728B8F27156C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B1061298-AB4A-49BC-A619-B8F537FF0812}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{B1B780B6-5732-4813-A7FB-9D401BE77BA0}" = protocol=6 | dir=in | app=c:\program files (x86)\logitech\logitech vid\vid.exe |
"{C4C0FF8C-F267-414D-974A-C1A470EC9558}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{C567CFB1-E3A5-4C3C-B065-DA0D9D482BBA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C7989042-B00D-4720-A685-F74BDC58C1AA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DCF06F55-75AC-4A93-9E89-D11733F63F34}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E9962DF2-71FE-4FA6-BF72-B3DD5BCAB2D6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{EEFDC460-B534-4B40-B0CF-DC9DB5F3F538}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series" = Canon MP250 series MP Drivers
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
"72A50F48CC5601190B9C4E74D81161693133E7F7" = Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9)
"CCleaner" = CCleaner
"E0AC723A3DE3A04256288CADBBB011B112AED454" = Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7)
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"WinRAR archiver" = WinRAR 4.20 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2EE90F26-20B3-4423-81DE-E57E5D2E4FEF}" = Zoner GIF Animator 5
"{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}" = Logitech Vid
"{644F4910-E812-49AD-93EC-86828CB81A0D}" = PC Connectivity Solution
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.14
"{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}" = Nokia PC Suite
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{A57025CC-5F2E-4D01-B387-06DB10500D43}" = Nokia Connectivity Cable Driver
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Czech
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"Avast" = avast! Internet Security
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Filters Unlimited_is1" = Filters Unlimited 2.0
"Google Chrome" = Google Chrome
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Ovladače zařízení
"KLiteCodecPack_is1" = K-Lite Codec Pack 10.3.5 Full
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"Nokia PC Suite" = Nokia PC Suite
"PhotoFiltre" = PhotoFiltre
"PhotoFiltre Studio" = PhotoFiltre Studio
"Registrace uživatele zařízení Canon MP250 series" = Registrace uživatele zařízení Canon MP250 series
"Revo Uninstaller" = Revo Uninstaller 1.95
"Totalcmd" = Total Commander (Remove or Repair)
"VLC media player" = VLC media player 2.1.3

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22.4.2014 11:55:55 | Computer Name = Maminka-PC | Source = WinMgmt | ID = 10
Description =

Error - 22.4.2014 17:03:38 | Computer Name = Maminka-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Služba Šifrování selhala při volání OnIdentity() v objektu System
Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary eqnagvnl.

System
Error: Systém nemůže nalézt uvedený soubor. .

Error - 22.4.2014 17:21:53 | Computer Name = Maminka-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Služba Šifrování selhala při volání OnIdentity() v objektu System
Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary eqnagvnl.

System
Error: Systém nemůže nalézt uvedený soubor. .

Error - 22.4.2014 17:40:36 | Computer Name = Maminka-PC | Source = WinMgmt | ID = 10
Description =

Error - 22.4.2014 17:58:38 | Computer Name = Maminka-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Služba Šifrování selhala při volání OnIdentity() v objektu System
Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary cxqdacmi.

System
Error: Systém nemůže nalézt uvedený soubor. .

Error - 22.4.2014 18:16:33 | Computer Name = Maminka-PC | Source = Application Hang | ID = 1002
Description = Program install_flash_player_13_active_x.exe verze 13.0.0.182 přestal
spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici
více informací o tomto problému, vyhledejte historii problému v ovládacím panelu
Centrum akcí. ID procesu: 744 Čas spuštění: 01cf5e78386554e4 Čas ukončení: 207 Cesta
k aplikaci: C:\Windows\TEMP\avast_ash\Flash Player ActiveX\install_flash_player_13_active_x.exe

ID
hlášení: 8eab8e40-ca6b-11e3-979e-0016171716c8

Error - 23.4.2014 1:22:35 | Computer Name = Maminka-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.4.2014 3:10:12 | Computer Name = Maminka-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_Windows7PIM.dll se nezdařilo. Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.4.2014 5:11:37 | Computer Name = Maminka-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.4.2014 7:15:12 | Computer Name = Maminka-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 18.4.2014 4:22:34 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 19.4.2014 9:33:54 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 20.4.2014 0:25:44 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 20.4.2014 13:01:06 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 21.4.2014 0:32:39 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 21.4.2014 13:09:47 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 22.4.2014 8:34:42 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 22.4.2014 10:01:57 | Computer Name = Maminka-PC | Source = Service Control Manager | ID = 7024
Description = Služba Windows Search ukončena s chybou %%-1073473536, specifickou
pro službu.

Error - 22.4.2014 10:01:57 | Computer Name = Maminka-PC | Source = Service Control Manager | ID = 7031
Description = Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error - 23.4.2014 7:14:59 | Computer Name = Maminka-PC | Source = WMPNetworkSvc | ID = 866300
Description =


< End of report >