zpomalený PC a net
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
zpomalený PC a net
Prosím o kontrolu logu. Online eset skener našel a zajistil nějakou havěď, ale PC je stále pomalé a i větší odezva netu. Moc Vám děkuji.
Logfile of random's system information tool 1.09 (written by random/random)
Run by zdeny at 2014-05-09 12:38:02
Microsoft Windows 8.1 Pro s aplikací Media Center
System drive C: has 3 GB (1%) free of 477 GB
Total RAM: 8126 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:38:06, on 9. 5. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal
Running processes:
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe
C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe
C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\zdeny.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchsun.info/?pid=72 ... g=EN&cc=CZ
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: YoutubeAdblocker - {E7B5F15E-AE02-463E-B459-B0533F5D0496} - C:\Program Files (x86)\YoutubeAdblocker\t.dll
O4 - HKLM\..\Run: [TP-LINK USB Printer Controller] C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe -mini
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Nero MediaHome 4] "C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Zdeněk\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [LG Cloud] "C:\Program Files\LG Cloud\LGCloud.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files (x86)\Ralink\Common\RaUI.exe
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.6.2.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 5.15.0.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O20 - AppInit_DLLs: c:\progra~2\sw-booster\assistant.dll
O21 - SSODL: EldosMountNotificator-cbfs4-0 - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\WOW64\cbfsMntNtf4.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\WOW64\cbfsMntNtf4.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AirPrint - Apple Inc. - C:\Program Files (x86)\AirPrint\airprint.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\WINDOWS\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: RalinkRegistryWriter - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
O23 - Service: RalinkRegistryWriter64 - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
O23 - Service: Ralink UPnP Media Server (RaMediaServer) - Ralink - C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VMware Workstation Server (VMwareHostd) - Unknown owner - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11714 bytes
======Listing Processes======
wininit.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
"C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
C:\WINDOWS\system32\HPSIsvc.exe
"C:\Program Files (x86)\Ralink\Common\RaRegistry.exe"
"C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe"
dashost.exe {2cbbc965-1332-4c0a-babd4e815bb956a0}
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\SysWOW64\vmnat.exe
"C:\Program Files (x86)\AirPrint\airprint.exe" -R _ipp._tcp,_universal -s
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
C:\WINDOWS\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe" -u "C:\ProgramData\VMware\hostd\config.xml"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5059f92f-d226-4c48-a9c0-5ef7a06317a2 -SystemEventPortName:HostProcess-10193b4e-2d51-46b7-8feb-c87ff925a8ee -IoCancelEventPortName:HostProcess-a7089991-7400-4f7f-b879-1a32b4c0282a -NonStateChangingEventPortName:HostProcess-9bdf8529-6ae5-4231-9d5f-62f7b53af1ae -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:190ca976-00a9-4032-924f-4d3fc0d133ea -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
taskeng.exe {83C92B54-6769-4F36-B806-F0E3E3996084}
"c:\programdata\appready software\sw-booster\SW-Booster.exe" /schedule /profile "c:\programdata\appready software\sw-booster\5644911192.ini"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
taskhostex.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3088 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe" -mini
"C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4119630896-2381959156-1040506587-1001103_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4119630896-2381959156-1040506587-1001103 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3088 CREDAT:3413269 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\Zdeněk\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\DriverToolkit Autorun.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job
C:\WINDOWS\tasks\SW-Booster-S-5644911192.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-04-11 218784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-04-11 2333400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}]
YoutubeAdblocker - C:\Program Files (x86)\YoutubeAdblocker\t.x64.dll [2014-05-07 472064]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}]
YoutubeAdblocker - C:\Program Files (x86)\YoutubeAdblocker\t.dll [2013-05-07 423936]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2012-04-27 395384]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"com.apple.dav.bookmarks.daemon"=C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe [2013-04-05 59720]
"SkyDrive"=C:\Users\Zdeněk\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-04-10 257224]
"LG Cloud"=C:\Program Files\LG Cloud\LGCloud.exe [2013-12-30 3608576]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-04-25 22415552]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TP-LINK USB Printer Controller"=C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe [2012-09-21 4226048]
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-10-15 30264]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-12 43848]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2012-04-27 2637784]
"Nero MediaHome 4"=C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe [2012-12-20 5179880]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-04-03 450560]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-24 642304]
"SoundMAXPnP"=C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2010-06-15 1044480]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
"vmware-tray.exe"=C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [2014-04-14 112856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Ralink Wireless Utility.lnk - C:\Program Files (x86)\Ralink\Common\RaUI.exe
C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odeslat do OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\PROGRA~2\SW-Booster\Assistant_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
EldosMountNotificator-cbfs4-0 - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\cbfsMntNtf4.dll [2013-03-01 181608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Virtual Storage Mount Notification - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\cbfsMntNtf4.dll [2013-03-01 181608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
Logfile of random's system information tool 1.09 (written by random/random)
Run by zdeny at 2014-05-09 12:38:02
Microsoft Windows 8.1 Pro s aplikací Media Center
System drive C: has 3 GB (1%) free of 477 GB
Total RAM: 8126 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:38:06, on 9. 5. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal
Running processes:
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe
C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe
C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\zdeny.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchsun.info/?pid=72 ... g=EN&cc=CZ
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: YoutubeAdblocker - {E7B5F15E-AE02-463E-B459-B0533F5D0496} - C:\Program Files (x86)\YoutubeAdblocker\t.dll
O4 - HKLM\..\Run: [TP-LINK USB Printer Controller] C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe -mini
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Nero MediaHome 4] "C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Zdeněk\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [LG Cloud] "C:\Program Files\LG Cloud\LGCloud.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - Startup: Odeslat do OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files (x86)\Ralink\Common\RaUI.exe
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.6.2.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 5.15.0.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O20 - AppInit_DLLs: c:\progra~2\sw-booster\assistant.dll
O21 - SSODL: EldosMountNotificator-cbfs4-0 - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\WOW64\cbfsMntNtf4.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\WOW64\cbfsMntNtf4.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AirPrint - Apple Inc. - C:\Program Files (x86)\AirPrint\airprint.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\WINDOWS\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: RalinkRegistryWriter - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
O23 - Service: RalinkRegistryWriter64 - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
O23 - Service: Ralink UPnP Media Server (RaMediaServer) - Ralink - C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VMware Workstation Server (VMwareHostd) - Unknown owner - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11714 bytes
======Listing Processes======
wininit.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
"C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
"C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
C:\WINDOWS\system32\HPSIsvc.exe
"C:\Program Files (x86)\Ralink\Common\RaRegistry.exe"
"C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe"
dashost.exe {2cbbc965-1332-4c0a-babd4e815bb956a0}
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\SysWOW64\vmnat.exe
"C:\Program Files (x86)\AirPrint\airprint.exe" -R _ipp._tcp,_universal -s
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
C:\WINDOWS\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe" -u "C:\ProgramData\VMware\hostd\config.xml"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5059f92f-d226-4c48-a9c0-5ef7a06317a2 -SystemEventPortName:HostProcess-10193b4e-2d51-46b7-8feb-c87ff925a8ee -IoCancelEventPortName:HostProcess-a7089991-7400-4f7f-b879-1a32b4c0282a -NonStateChangingEventPortName:HostProcess-9bdf8529-6ae5-4231-9d5f-62f7b53af1ae -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:190ca976-00a9-4032-924f-4d3fc0d133ea -DeviceGroupId:WpdFsGroup
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
taskeng.exe {83C92B54-6769-4F36-B806-F0E3E3996084}
"c:\programdata\appready software\sw-booster\SW-Booster.exe" /schedule /profile "c:\programdata\appready software\sw-booster\5644911192.ini"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
taskhostex.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3088 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe" -mini
"C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4119630896-2381959156-1040506587-1001103_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4119630896-2381959156-1040506587-1001103 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3088 CREDAT:3413269 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\Zdeněk\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\WINDOWS\tasks\DriverToolkit Autorun.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job
C:\WINDOWS\tasks\SW-Booster-S-5644911192.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-04-11 218784]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-04-11 2333400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}]
YoutubeAdblocker - C:\Program Files (x86)\YoutubeAdblocker\t.x64.dll [2014-05-07 472064]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}]
YoutubeAdblocker - C:\Program Files (x86)\YoutubeAdblocker\t.dll [2013-05-07 423936]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Acronis Scheduler2 Service"=C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2012-04-27 395384]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"com.apple.dav.bookmarks.daemon"=C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe [2013-04-05 59720]
"SkyDrive"=C:\Users\Zdeněk\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2014-04-10 257224]
"LG Cloud"=C:\Program Files\LG Cloud\LGCloud.exe [2013-12-30 3608576]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-04-25 22415552]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"TP-LINK USB Printer Controller"=C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe [2012-09-21 4226048]
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-10-15 30264]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-02-12 43848]
"TrueImageMonitor.exe"=C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2012-04-27 2637784]
"Nero MediaHome 4"=C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe [2012-12-20 5179880]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-04-03 450560]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-24 642304]
"SoundMAXPnP"=C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2010-06-15 1044480]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
"vmware-tray.exe"=C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [2014-04-14 112856]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Ralink Wireless Utility.lnk - C:\Program Files (x86)\Ralink\Common\RaUI.exe
C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Odeslat do OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\PROGRA~2\SW-Booster\Assistant_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
EldosMountNotificator-cbfs4-0 - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\cbfsMntNtf4.dll [2013-03-01 181608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Virtual Storage Mount Notification - {B1435A9E-0F4C-4B1E-ACDE-353DFA5C0BCA} - C:\Program Files (x86)\Common Files\CBFS\cbfsMntNtf4.dll [2013-03-01 181608]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
log II
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-05-09 12:38:02 ----D---- C:\rsit
2014-05-07 15:04:31 ----D---- C:\ProgramData\Search-NewTTab
2014-05-07 15:04:31 ----D---- C:\Program Files (x86)\Search-NewTTab
2014-05-07 15:03:38 ----D---- C:\ProgramData\AppReady Software
2014-05-07 15:03:33 ----D---- C:\Program Files (x86)\SW-Booster
2014-05-07 15:01:59 ----D---- C:\ProgramData\YoutubeAdblocker
2014-05-07 15:01:58 ----D---- C:\Program Files (x86)\YoutubeAdblocker
2014-05-07 15:01:42 ----D---- C:\ProgramData\saVe oNet
2014-05-07 15:01:42 ----D---- C:\Program Files (x86)\saVe oNet
2014-05-07 15:01:30 ----D---- C:\ProgramData\37d26fcc63b8d58c
2014-05-07 15:00:34 ----D---- C:\ProgramData\InstallMate
2014-05-07 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\vsocklib.dll
2014-05-07 14:40:45 ----A---- C:\WINDOWS\system32\vsocklib.dll
2014-05-07 14:40:45 ----A---- C:\WINDOWS\system32\drivers\vsock.sys
2014-05-07 14:40:44 ----A---- C:\WINDOWS\system32\drivers\vmx86.sys
2014-05-07 14:40:22 ----A---- C:\WINDOWS\SYSWOW64\vmnetdhcp.exe
2014-05-07 14:40:21 ----A---- C:\WINDOWS\SYSWOW64\vmnat.exe
2014-05-07 14:40:21 ----A---- C:\WINDOWS\system32\drivers\vmnetuserif.sys
2014-05-07 14:40:17 ----A---- C:\WINDOWS\system32\vnetlib64.dll
2014-05-07 14:40:14 ----A---- C:\WINDOWS\system32\drivers\hcmon.sys
2014-05-02 13:46:06 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-05-02 13:43:58 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-05-02 13:43:57 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\vnetinst.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\vmnetbridge.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnetbridge.sys
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnetadapter.sys
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnet.sys
2014-04-11 21:05:54 ----D---- C:\WINDOWS\Panther
2014-04-10 13:21:06 ----SH---- C:\WINDOWS\system32\desktop.ini
2014-04-10 13:14:18 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-04-10 13:14:16 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-04-10 13:14:16 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-04-10 13:14:15 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-04-10 13:14:15 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-04-10 13:14:14 ----A---- C:\WINDOWS\system32\win32k.sys
2014-04-10 13:14:14 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-04-10 13:14:13 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-04-10 13:14:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-04-10 13:14:08 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-04-10 13:14:08 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-04-10 13:14:06 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-04-10 13:14:06 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\system32\WSService.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2014-04-10 13:14:01 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-04-10 13:14:01 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2014-04-10 13:13:59 ----A---- C:\WINDOWS\system32\wininet.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\system32\combase.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\system32\wmp.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\system32\qedit.dll
2014-04-10 13:13:53 ----A---- C:\WINDOWS\system32\sppobjs.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\system32\tquery.dll
2014-04-10 13:13:51 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\system32\sysmain.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-04-10 13:13:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-04-10 13:13:48 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2014-04-10 13:13:48 ----A---- C:\WINDOWS\system32\mssrch.dll
2014-04-10 13:13:47 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\system32\dui70.dll
2014-04-10 13:13:45 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\webservices.dll
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\winmde.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\msctf.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\mispace.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\swprv.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-10 13:13:40 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-04-10 13:13:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\WinTypes.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2014-04-10 13:13:38 ----AC---- C:\WINDOWS\system32\drivers\acpi.sys
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\WerFault.exe
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\samsrv.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\Faultrep.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\WofTasks.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\winresume.exe
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\winload.exe
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\wer.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\setupapi.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\DfpCommon.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\system32\rpcss.dll
2014-04-10 13:13:35 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2014-04-10 13:13:35 ----A---- C:\WINDOWS\system32\RacEngn.dll
2014-04-10 13:13:35 ----A---- C:\WINDOWS\system32\mf.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\system32\WWAHost.exe
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\wpncore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-04-10 13:13:31 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\user32.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\hal.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\WofUtil.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\wimgapi.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\scrrun.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\apphelp.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\RacEngn.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\schannel.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\usercpl.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\recimg.exe
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\perftrack.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\dfpinc.dat
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\dfp.exe
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\mcmde.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\lsm.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\energy.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\advapi32.dll
2014-04-10 13:13:24 ----AC---- C:\WINDOWS\system32\drivers\pci.sys
2014-04-10 13:13:24 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\tdh.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\mssvp.dll
2014-04-10 13:13:23 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\winlogon.exe
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\msvproc.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\mssph.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\DismApi.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-04-10 13:13:22 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-04-10 13:13:22 ----AC---- C:\WINDOWS\system32\drivers\portcls.sys
2014-04-10 13:13:22 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\werconcpl.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\thumbcache.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\stobject.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\ci.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\system32\sppwinob.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\system32\ntshrui.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\WSClient.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\wlidcli.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\psmsrv.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\printui.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\iuilp.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\slc.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\pnidui.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\nettrace.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\Dism.exe
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\system32\dwmredir.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\WlanMM.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\VAN.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\osk.exe
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\ninput.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\authz.dll
2014-04-10 13:13:15 ----AC---- C:\WINDOWS\system32\drivers\vhdmp.sys
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\wersvc.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\themeui.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\taskeng.exe
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\rdbui.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\rascustom.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\conhost.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\DismApi.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\wbengine.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\sqmapi.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\rdpcore.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\Dism.exe
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\sppc.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\cscui.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\WLanConn.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\wimserv.exe
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\PkgMgr.exe
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\clrhost.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\bcrypt.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-04-10 13:13:11 ----AC---- C:\WINDOWS\system32\drivers\sdbus.sys
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\wscinterop.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\gameux.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\fhcfg.dll
2014-04-10 13:13:10 ----AC---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2014-04-10 13:13:10 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\winsrv.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\taskhost.exe
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\rasgcw.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\dwm.exe
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wscapi.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wermgr.exe
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\srchadmin.dll
2014-04-10 13:13:08 ----AC---- C:\WINDOWS\system32\drivers\dumpsd.sys
2014-04-10 13:13:08 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\smss.exe
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\BioCredProv.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\AltTab.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\vdsbas.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\systemreset.exe
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\RASMM.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\netid.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\imm32.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\fsutil.exe
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\fhcpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\fsutil.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\WSDApi.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\taskhostex.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\sdclt.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\fileinfo.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\das.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\CloudNotifications.exe
2014-04-10 13:13:05 ----AC---- C:\WINDOWS\system32\drivers\sdstor.sys
2014-04-10 13:13:05 ----AC---- C:\WINDOWS\system32\drivers\BasicRender.sys
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\imm32.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\zipfldr.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\wusa.exe
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\powrprof.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\newdev.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\mssprxy.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\aepic.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\powrprof.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\wow64win.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\vds.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\UserAccountBroker.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\spwizeng.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\RestoreOptIn.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\UserAccountBroker.exe
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\RestoreOptIn.exe
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\dot3mm.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\bcd.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\srclient.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\easinvoker.exe
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\DAMM.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\bootux.dll
2014-04-10 13:13:01 ----AC---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2014-04-10 13:13:01 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2014-04-10 13:13:01 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\samlib.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\rasmans.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\provsvc.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\netiohlp.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\easwrt.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\AuthHost.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\BioCredProv.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\drivers\http.sys
2014-04-10 13:12:59 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\srcore.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\scrobj.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\netplwiz.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\acppage.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\winbrand.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\wbadmin.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\slpts.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\bcdedit.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wpnprv.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\untfs.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\sud.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\sppnp.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\bcdboot.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autochk.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autofmt.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autoconv.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\slpts.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\PkgMgr.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\spbcd.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\migisol.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\fhevents.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\dafBth.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\DAConn.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\WimBootCompress.ini
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\spwizeng.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\WimBootCompress.ini
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\werui.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\vdsutil.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\spcompat.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\energytask.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\drivers\watchdog.sys
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\diskpart.exe
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\devinv.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\cscript.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\RelPost.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\powercfg.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\pnpclean.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\srrstr.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\dasHost.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\SSShim.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\wups.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\offreg.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\dfrgui.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\msshooks.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\mf3216.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\diskpart.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\winsku.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\vdsdyn.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\themecpl.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\SrTasks.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\AepRoam.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\sxshared.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\scavengeui.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-10 13:12:48 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\system32\wincorlib.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\finger.exe
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\syncui.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\ocsetapi.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\korwbrkr.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\shsetup.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\ocsetapi.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\dataclen.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\aitagent.exe
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\winbici.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\shimeng.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\occache.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\finger.exe
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\fhsvcctl.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\dxmasf.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-04-10 13:12:44 ----A---- C:\WINDOWS\SYSWOW64\f3ahvoas.dll
2014-04-10 13:12:44 ----A---- C:\WINDOWS\system32\srms.dat
2014-04-10 13:07:32 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-10 13:07:30 ----A---- C:\WINDOWS\system32\shell32.dll
2014-04-10 13:07:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-04-10 13:07:29 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-04-10 13:07:28 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-10 13:07:28 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-10 13:07:27 ----A---- C:\WINDOWS\system32\twinui.dll
2014-04-10 13:07:27 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-04-10 13:07:24 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-04-10 13:07:20 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-04-10 13:07:20 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-04-10 13:07:20 ----A---- C:\WINDOWS\explorer.exe
2014-04-10 13:07:19 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-04-10 13:07:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\authui.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\ole32.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\localspl.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\propsys.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-04-10 13:07:13 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-04-10 13:07:13 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-10 13:07:09 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-04-10 13:07:09 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\userenv.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\pdh.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\Display.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\spp.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\cdd.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\aclui.dll
2014-04-10 13:07:07 ----AC---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-04-10 13:07:07 ----AC---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\fveapibase.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\fvewiz.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-10 13:06:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-10 13:03:40 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-04-10 13:03:31 ----A---- C:\WINDOWS\system32\mfps.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-04-10 13:03:22 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-04-10 13:03:21 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-04-10 13:03:20 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-04-10 13:03:19 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-04-10 13:03:19 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-04-10 12:53:51 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-04-10 12:53:49 ----A---- C:\WINDOWS\system32\msrating.dll
2014-04-10 11:55:55 ----D---- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs
======List of files/folders modified in the last 1 month======
2014-05-09 12:38:04 ----D---- C:\Program Files\trend micro
2014-05-09 12:38:00 ----D---- C:\WINDOWS\Prefetch
2014-05-09 12:31:56 ----D---- C:\WINDOWS\Temp
2014-05-09 12:31:47 ----D---- C:\WINDOWS\AppReadiness
2014-05-09 12:29:25 ----D---- C:\WINDOWS\system32\sru
2014-05-08 16:33:43 ----D---- C:\Users\Zdeněk\AppData\Roaming\VMware
2014-05-08 16:28:45 ----D---- C:\WINDOWS\Microsoft.NET
2014-05-08 15:44:29 ----HD---- C:\Program Files\WindowsApps
2014-05-08 15:38:03 ----D---- C:\ProgramData\VMware
2014-05-08 15:21:20 ----SHD---- C:\WINDOWS\Installer
2014-05-08 15:21:19 ----D---- C:\Config.Msi
2014-05-07 20:15:34 ----D---- C:\Users\Zdeněk\AppData\Roaming\BitTorrent
2014-05-07 15:50:22 ----RD---- C:\WINDOWS\System32
2014-05-07 15:50:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-07 15:50:21 ----D---- C:\WINDOWS\Inf
2014-05-07 15:45:32 ----D---- C:\WINDOWS\debug
2014-05-07 15:45:12 ----RD---- C:\Program Files (x86)
2014-05-07 15:05:47 ----D---- C:\WINDOWS\SysWOW64
2014-05-07 15:04:31 ----HD---- C:\ProgramData
2014-05-07 15:03:39 ----D---- C:\WINDOWS\Tasks
2014-05-07 15:03:39 ----D---- C:\WINDOWS\system32\Tasks
2014-05-07 15:01:28 ----RD---- C:\Users
2014-05-07 14:47:03 ----D---- C:\ProgramData\DivX
2014-05-07 14:47:01 ----D---- C:\Program Files (x86)\DivX
2014-05-07 14:40:45 ----D---- C:\WINDOWS\system32\DriverStore
2014-05-07 14:40:45 ----D---- C:\WINDOWS\system32\drivers
2014-05-07 14:40:09 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2014-05-07 14:39:54 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-05-07 14:39:03 ----D---- C:\Program Files (x86)\Common Files
2014-05-07 11:05:47 ----D---- C:\Windows
2014-05-07 11:01:41 ----D---- C:\WINDOWS\system32\config
2014-05-07 11:00:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2014-05-06 13:11:54 ----D---- C:\WINDOWS\CbsTemp
2014-05-06 13:11:41 ----SHD---- C:\System Volume Information
2014-05-06 12:49:39 ----D---- C:\WINDOWS\WinSxS
2014-04-28 11:20:40 ----D---- C:\WINDOWS\SoftwareDistribution
2014-04-28 10:36:32 ----RD---- C:\Program Files
2014-04-28 10:35:24 ----D---- C:\Program Files\CCleaner
2014-04-23 16:13:04 ----D---- C:\WINDOWS\rescache
2014-04-17 15:04:43 ----RSD---- C:\WINDOWS\assembly
2014-04-17 13:24:28 ----SHD---- C:\$Recycle.Bin
2014-04-11 21:23:27 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-04-11 21:22:20 ----D---- C:\Program Files\Microsoft Office 15
2014-04-10 14:42:48 ----D---- C:\WINDOWS\apppatch
2014-04-10 13:43:28 ----D---- C:\WINDOWS\Logs
2014-04-10 13:30:02 ----RD---- C:\WINDOWS\ToastData
2014-04-10 13:29:59 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-04-10 13:29:58 ----D---- C:\WINDOWS\PolicyDefinitions
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\wbem
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\setup
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\cs-CZ
2014-04-10 13:29:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-10 13:29:53 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-04-10 13:29:53 ----D---- C:\WINDOWS\system32\en-US
2014-04-10 13:29:53 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-04-10 13:29:53 ----D---- C:\Program Files\Internet Explorer
2014-04-10 13:29:38 ----D---- C:\WINDOWS\WinStore
2014-04-10 13:29:38 ----D---- C:\WINDOWS\servicing
2014-04-10 13:29:38 ----D---- C:\WINDOWS\MediaViewer
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Portable Devices
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Multimedia Platform
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Media Player
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-04-10 13:29:33 ----D---- C:\WINDOWS\cs-CZ
2014-04-10 13:29:32 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\zh-TW
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\zh-CN
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\uk-UA
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\Sysprep
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sv-SE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sl-SI
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sk-SK
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ru-RU
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ro-RO
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\pt-PT
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\pl-PL
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\oobe
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\migration
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\lv-LV
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ko-KR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ja-JP
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\it-IT
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\hu-HU
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\hr-HR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\he-IL
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\fr-FR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\fi-FI
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\et-EE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\es-ES
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\en-GB
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\el-GR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\de-DE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\da-DK
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\bg-BG
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\zh-HK
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\tr-TR
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\th-TH
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\pt-BR
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\nl-NL
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\nb-NO
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\migwiz
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\lt-LT
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\drivers\en-US
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\Dism
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\Boot
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\ar-SA
2014-04-10 13:29:29 ----RSD---- C:\WINDOWS\Fonts
2014-04-10 13:29:29 ----D---- C:\WINDOWS\Camera
2014-04-10 13:29:28 ----D---- C:\WINDOWS\FileManager
2014-04-10 13:29:16 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-04-10 13:05:07 ----D---- C:\WINDOWS\system32\catroot2
2014-04-10 12:29:17 ----D---- C:\ProgramData\Microsoft Help
2014-04-10 12:28:20 ----D---- C:\WINDOWS\system32\MRT
2014-04-10 12:07:39 ----D---- C:\Users\Zdeněk\AppData\Roaming\DRPSu
2014-04-10 11:56:11 ----D---- C:\WINDOWS\system32\drivers\etc
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-05-09 12:38:02 ----D---- C:\rsit
2014-05-07 15:04:31 ----D---- C:\ProgramData\Search-NewTTab
2014-05-07 15:04:31 ----D---- C:\Program Files (x86)\Search-NewTTab
2014-05-07 15:03:38 ----D---- C:\ProgramData\AppReady Software
2014-05-07 15:03:33 ----D---- C:\Program Files (x86)\SW-Booster
2014-05-07 15:01:59 ----D---- C:\ProgramData\YoutubeAdblocker
2014-05-07 15:01:58 ----D---- C:\Program Files (x86)\YoutubeAdblocker
2014-05-07 15:01:42 ----D---- C:\ProgramData\saVe oNet
2014-05-07 15:01:42 ----D---- C:\Program Files (x86)\saVe oNet
2014-05-07 15:01:30 ----D---- C:\ProgramData\37d26fcc63b8d58c
2014-05-07 15:00:34 ----D---- C:\ProgramData\InstallMate
2014-05-07 14:40:45 ----A---- C:\WINDOWS\SYSWOW64\vsocklib.dll
2014-05-07 14:40:45 ----A---- C:\WINDOWS\system32\vsocklib.dll
2014-05-07 14:40:45 ----A---- C:\WINDOWS\system32\drivers\vsock.sys
2014-05-07 14:40:44 ----A---- C:\WINDOWS\system32\drivers\vmx86.sys
2014-05-07 14:40:22 ----A---- C:\WINDOWS\SYSWOW64\vmnetdhcp.exe
2014-05-07 14:40:21 ----A---- C:\WINDOWS\SYSWOW64\vmnat.exe
2014-05-07 14:40:21 ----A---- C:\WINDOWS\system32\drivers\vmnetuserif.sys
2014-05-07 14:40:17 ----A---- C:\WINDOWS\system32\vnetlib64.dll
2014-05-07 14:40:14 ----A---- C:\WINDOWS\system32\drivers\hcmon.sys
2014-05-02 13:46:06 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-05-02 13:43:58 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-05-02 13:43:57 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-04-17 13:42:00 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\vnetinst.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\vmnetbridge.dll
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnetbridge.sys
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnetadapter.sys
2014-04-14 16:40:42 ----A---- C:\WINDOWS\system32\drivers\vmnet.sys
2014-04-11 21:05:54 ----D---- C:\WINDOWS\Panther
2014-04-10 13:21:06 ----SH---- C:\WINDOWS\system32\desktop.ini
2014-04-10 13:14:18 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-04-10 13:14:16 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-04-10 13:14:16 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-04-10 13:14:15 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-04-10 13:14:15 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-04-10 13:14:14 ----A---- C:\WINDOWS\system32\win32k.sys
2014-04-10 13:14:14 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-04-10 13:14:13 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-04-10 13:14:09 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-04-10 13:14:08 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-04-10 13:14:08 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-04-10 13:14:06 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-04-10 13:14:06 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\system32\WSService.dll
2014-04-10 13:14:05 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2014-04-10 13:14:01 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-04-10 13:14:01 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2014-04-10 13:13:59 ----A---- C:\WINDOWS\system32\wininet.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-04-10 13:13:57 ----A---- C:\WINDOWS\system32\combase.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\system32\wmp.dll
2014-04-10 13:13:54 ----A---- C:\WINDOWS\system32\qedit.dll
2014-04-10 13:13:53 ----A---- C:\WINDOWS\system32\sppobjs.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-04-10 13:13:52 ----A---- C:\WINDOWS\system32\tquery.dll
2014-04-10 13:13:51 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\system32\sysmain.dll
2014-04-10 13:13:50 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-04-10 13:13:49 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-04-10 13:13:48 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2014-04-10 13:13:48 ----A---- C:\WINDOWS\system32\mssrch.dll
2014-04-10 13:13:47 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-04-10 13:13:46 ----A---- C:\WINDOWS\system32\dui70.dll
2014-04-10 13:13:45 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\webservices.dll
2014-04-10 13:13:44 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\winmde.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-04-10 13:13:43 ----A---- C:\WINDOWS\system32\msctf.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2014-04-10 13:13:42 ----A---- C:\WINDOWS\system32\mispace.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\swprv.dll
2014-04-10 13:13:41 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-10 13:13:40 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-04-10 13:13:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-04-10 13:13:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\WinTypes.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2014-04-10 13:13:39 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2014-04-10 13:13:38 ----AC---- C:\WINDOWS\system32\drivers\acpi.sys
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\WerFault.exe
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\samsrv.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\Faultrep.dll
2014-04-10 13:13:38 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\WofTasks.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\winresume.exe
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\winload.exe
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\wer.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\setupapi.dll
2014-04-10 13:13:37 ----A---- C:\WINDOWS\system32\DfpCommon.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-04-10 13:13:36 ----A---- C:\WINDOWS\system32\rpcss.dll
2014-04-10 13:13:35 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2014-04-10 13:13:35 ----A---- C:\WINDOWS\system32\RacEngn.dll
2014-04-10 13:13:35 ----A---- C:\WINDOWS\system32\mf.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2014-04-10 13:13:34 ----A---- C:\WINDOWS\system32\WWAHost.exe
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\wpncore.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2014-04-10 13:13:33 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2014-04-10 13:13:32 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-04-10 13:13:31 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\user32.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-04-10 13:13:31 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-04-10 13:13:30 ----A---- C:\WINDOWS\system32\hal.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\WofUtil.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\wimgapi.dll
2014-04-10 13:13:29 ----A---- C:\WINDOWS\system32\scrrun.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2014-04-10 13:13:28 ----A---- C:\WINDOWS\system32\apphelp.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\SYSWOW64\RacEngn.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\schannel.dll
2014-04-10 13:13:27 ----A---- C:\WINDOWS\system32\drivers\rdyboost.sys
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\usercpl.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\recimg.exe
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\perftrack.dll
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\dfpinc.dat
2014-04-10 13:13:26 ----A---- C:\WINDOWS\system32\dfp.exe
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\mcmde.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\lsm.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\energy.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-04-10 13:13:25 ----A---- C:\WINDOWS\system32\advapi32.dll
2014-04-10 13:13:24 ----AC---- C:\WINDOWS\system32\drivers\pci.sys
2014-04-10 13:13:24 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\tdh.dll
2014-04-10 13:13:24 ----A---- C:\WINDOWS\system32\mssvp.dll
2014-04-10 13:13:23 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\winlogon.exe
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\msvproc.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\mssph.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\DismApi.dll
2014-04-10 13:13:23 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-04-10 13:13:22 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-04-10 13:13:22 ----AC---- C:\WINDOWS\system32\drivers\portcls.sys
2014-04-10 13:13:22 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\werconcpl.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\thumbcache.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\stobject.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-04-10 13:13:22 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2014-04-10 13:13:21 ----A---- C:\WINDOWS\system32\ci.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\system32\sppwinob.dll
2014-04-10 13:13:20 ----A---- C:\WINDOWS\system32\ntshrui.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\slc.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\WSClient.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\wlidcli.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\psmsrv.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\printui.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\iuilp.dll
2014-04-10 13:13:19 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\slc.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\pnidui.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\nettrace.dll
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\Dism.exe
2014-04-10 13:13:18 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-04-10 13:13:17 ----A---- C:\WINDOWS\system32\dwmredir.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\WlanMM.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\VAN.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\osk.exe
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\ninput.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-04-10 13:13:16 ----A---- C:\WINDOWS\system32\authz.dll
2014-04-10 13:13:15 ----AC---- C:\WINDOWS\system32\drivers\vhdmp.sys
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\wersvc.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\themeui.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\taskeng.exe
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\rdbui.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\rascustom.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-04-10 13:13:15 ----A---- C:\WINDOWS\system32\conhost.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\SYSWOW64\DismApi.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\wbengine.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\sqmapi.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\rdpcore.dll
2014-04-10 13:13:14 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\SYSWOW64\Dism.exe
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\sppc.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-04-10 13:13:13 ----A---- C:\WINDOWS\system32\cscui.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\SYSWOW64\sppc.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\WLanConn.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\wimserv.exe
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\PkgMgr.exe
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\clrhost.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\bcrypt.dll
2014-04-10 13:13:12 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-04-10 13:13:11 ----AC---- C:\WINDOWS\system32\drivers\sdbus.sys
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-04-10 13:13:11 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\wscinterop.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\gameux.dll
2014-04-10 13:13:11 ----A---- C:\WINDOWS\system32\fhcfg.dll
2014-04-10 13:13:10 ----AC---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2014-04-10 13:13:10 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\winsrv.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\taskhost.exe
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\rasgcw.dll
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\dwm.exe
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\drivers\PEAuth.sys
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2014-04-10 13:13:10 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\clrhost.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wscapi.dll
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\wermgr.exe
2014-04-10 13:13:09 ----A---- C:\WINDOWS\system32\srchadmin.dll
2014-04-10 13:13:08 ----AC---- C:\WINDOWS\system32\drivers\dumpsd.sys
2014-04-10 13:13:08 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\smss.exe
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\BioCredProv.dll
2014-04-10 13:13:08 ----A---- C:\WINDOWS\system32\AltTab.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\vdsbas.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\systemreset.exe
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\RASMM.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\netid.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\imm32.dll
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\fsutil.exe
2014-04-10 13:13:07 ----A---- C:\WINDOWS\system32\fhcpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\fsutil.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\WSDApi.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\taskhostex.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\sdclt.exe
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\drivers\fileinfo.sys
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\das.dll
2014-04-10 13:13:06 ----A---- C:\WINDOWS\system32\CloudNotifications.exe
2014-04-10 13:13:05 ----AC---- C:\WINDOWS\system32\drivers\sdstor.sys
2014-04-10 13:13:05 ----AC---- C:\WINDOWS\system32\drivers\BasicRender.sys
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\imm32.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\zipfldr.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\wusa.exe
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\powrprof.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\newdev.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\mssprxy.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2014-04-10 13:13:05 ----A---- C:\WINDOWS\system32\aepic.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\powrprof.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\wow64win.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\vds.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\UserAccountBroker.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\spwizeng.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\RestoreOptIn.exe
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2014-04-10 13:13:04 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\UserAccountBroker.exe
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\RestoreOptIn.exe
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\dot3mm.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\bcd.dll
2014-04-10 13:13:03 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2014-04-10 13:13:02 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\srclient.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\easinvoker.exe
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\drivers\dumpfve.sys
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\DAMM.dll
2014-04-10 13:13:02 ----A---- C:\WINDOWS\system32\bootux.dll
2014-04-10 13:13:01 ----AC---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2014-04-10 13:13:01 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2014-04-10 13:13:01 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\samlib.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\rasmans.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\provsvc.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\netiohlp.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\easwrt.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2014-04-10 13:13:01 ----A---- C:\WINDOWS\system32\AuthHost.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\SYSWOW64\BioCredProv.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2014-04-10 13:13:00 ----A---- C:\WINDOWS\system32\drivers\http.sys
2014-04-10 13:12:59 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\srcore.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\scrobj.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\netplwiz.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2014-04-10 13:12:59 ----A---- C:\WINDOWS\system32\acppage.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\winbrand.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\wbadmin.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\slpts.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\bcdedit.exe
2014-04-10 13:12:58 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wpnprv.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\untfs.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\sud.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\sppnp.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\bcdboot.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autochk.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autofmt.exe
2014-04-10 13:12:57 ----A---- C:\WINDOWS\system32\autoconv.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\slpts.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\PkgMgr.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autofmt.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\WindowsAnytimeUpgradeResults.exe
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\spbcd.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\migisol.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\fhevents.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\dafBth.dll
2014-04-10 13:12:56 ----A---- C:\WINDOWS\system32\DAConn.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\WimBootCompress.ini
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\spwizeng.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\WimBootCompress.ini
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\werui.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\vdsutil.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\spcompat.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\energytask.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\drivers\watchdog.sys
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\diskpart.exe
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\devinv.dll
2014-04-10 13:12:55 ----A---- C:\WINDOWS\system32\cscript.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\RelPost.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\powercfg.exe
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\pnpclean.dll
2014-04-10 13:12:54 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\srrstr.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2014-04-10 13:12:53 ----A---- C:\WINDOWS\system32\dasHost.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\SSShim.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\wups.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\offreg.dll
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\dfrgui.exe
2014-04-10 13:12:52 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2014-04-10 13:12:51 ----A---- C:\WINDOWS\SYSWOW64\migisol.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\msshooks.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\mf3216.dll
2014-04-10 13:12:51 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\diskpart.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\winsku.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\vdsdyn.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\themecpl.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\SrTasks.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-04-10 13:12:50 ----A---- C:\WINDOWS\system32\AepRoam.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\sxshared.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\scavengeui.dll
2014-04-10 13:12:49 ----A---- C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-04-10 13:12:48 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2014-04-10 13:12:48 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-04-10 13:12:48 ----A---- C:\WINDOWS\system32\wincorlib.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\SYSWOW64\finger.exe
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\syncui.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-04-10 13:12:47 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-04-10 13:12:46 ----AH---- C:\WINDOWS\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\ocsetapi.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\korwbrkr.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\shsetup.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\ocsetapi.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\dataclen.dll
2014-04-10 13:12:46 ----A---- C:\WINDOWS\system32\aitagent.exe
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\SYSWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-04-10 13:12:45 ----AH---- C:\WINDOWS\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\winbici.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\shimeng.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\occache.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\finger.exe
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\fhsvcctl.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\dxmasf.dll
2014-04-10 13:12:45 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-04-10 13:12:44 ----A---- C:\WINDOWS\SYSWOW64\f3ahvoas.dll
2014-04-10 13:12:44 ----A---- C:\WINDOWS\system32\srms.dat
2014-04-10 13:07:32 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-10 13:07:30 ----A---- C:\WINDOWS\system32\shell32.dll
2014-04-10 13:07:29 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-04-10 13:07:29 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-04-10 13:07:28 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-10 13:07:28 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-10 13:07:27 ----A---- C:\WINDOWS\system32\twinui.dll
2014-04-10 13:07:27 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-04-10 13:07:24 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-04-10 13:07:23 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-04-10 13:07:21 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-04-10 13:07:20 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-04-10 13:07:20 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-04-10 13:07:20 ----A---- C:\WINDOWS\explorer.exe
2014-04-10 13:07:19 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-04-10 13:07:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\authui.dll
2014-04-10 13:07:19 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\ole32.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-04-10 13:07:18 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-04-10 13:07:17 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\localspl.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-04-10 13:07:16 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\propsys.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-04-10 13:07:15 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-04-10 13:07:14 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-04-10 13:07:13 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-04-10 13:07:13 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-04-10 13:07:12 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-10 13:07:11 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-04-10 13:07:10 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-10 13:07:09 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-04-10 13:07:09 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\userenv.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\pdh.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\Display.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-10 13:07:09 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\spp.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\cdd.dll
2014-04-10 13:07:08 ----A---- C:\WINDOWS\system32\aclui.dll
2014-04-10 13:07:07 ----AC---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-04-10 13:07:07 ----AC---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\fveapibase.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-04-10 13:07:07 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\fvewiz.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-04-10 13:07:06 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-04-10 13:07:05 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2014-04-10 13:06:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-10 13:03:40 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-04-10 13:03:31 ----A---- C:\WINDOWS\system32\mfps.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-10 13:03:23 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-04-10 13:03:22 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-04-10 13:03:21 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-04-10 13:03:20 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-04-10 13:03:19 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-04-10 13:03:19 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-04-10 12:53:51 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-04-10 12:53:49 ----A---- C:\WINDOWS\system32\msrating.dll
2014-04-10 11:55:55 ----D---- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs
======List of files/folders modified in the last 1 month======
2014-05-09 12:38:04 ----D---- C:\Program Files\trend micro
2014-05-09 12:38:00 ----D---- C:\WINDOWS\Prefetch
2014-05-09 12:31:56 ----D---- C:\WINDOWS\Temp
2014-05-09 12:31:47 ----D---- C:\WINDOWS\AppReadiness
2014-05-09 12:29:25 ----D---- C:\WINDOWS\system32\sru
2014-05-08 16:33:43 ----D---- C:\Users\Zdeněk\AppData\Roaming\VMware
2014-05-08 16:28:45 ----D---- C:\WINDOWS\Microsoft.NET
2014-05-08 15:44:29 ----HD---- C:\Program Files\WindowsApps
2014-05-08 15:38:03 ----D---- C:\ProgramData\VMware
2014-05-08 15:21:20 ----SHD---- C:\WINDOWS\Installer
2014-05-08 15:21:19 ----D---- C:\Config.Msi
2014-05-07 20:15:34 ----D---- C:\Users\Zdeněk\AppData\Roaming\BitTorrent
2014-05-07 15:50:22 ----RD---- C:\WINDOWS\System32
2014-05-07 15:50:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-05-07 15:50:21 ----D---- C:\WINDOWS\Inf
2014-05-07 15:45:32 ----D---- C:\WINDOWS\debug
2014-05-07 15:45:12 ----RD---- C:\Program Files (x86)
2014-05-07 15:05:47 ----D---- C:\WINDOWS\SysWOW64
2014-05-07 15:04:31 ----HD---- C:\ProgramData
2014-05-07 15:03:39 ----D---- C:\WINDOWS\Tasks
2014-05-07 15:03:39 ----D---- C:\WINDOWS\system32\Tasks
2014-05-07 15:01:28 ----RD---- C:\Users
2014-05-07 14:47:03 ----D---- C:\ProgramData\DivX
2014-05-07 14:47:01 ----D---- C:\Program Files (x86)\DivX
2014-05-07 14:40:45 ----D---- C:\WINDOWS\system32\DriverStore
2014-05-07 14:40:45 ----D---- C:\WINDOWS\system32\drivers
2014-05-07 14:40:09 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2014-05-07 14:39:54 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-05-07 14:39:03 ----D---- C:\Program Files (x86)\Common Files
2014-05-07 11:05:47 ----D---- C:\Windows
2014-05-07 11:01:41 ----D---- C:\WINDOWS\system32\config
2014-05-07 11:00:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2014-05-06 13:11:54 ----D---- C:\WINDOWS\CbsTemp
2014-05-06 13:11:41 ----SHD---- C:\System Volume Information
2014-05-06 12:49:39 ----D---- C:\WINDOWS\WinSxS
2014-04-28 11:20:40 ----D---- C:\WINDOWS\SoftwareDistribution
2014-04-28 10:36:32 ----RD---- C:\Program Files
2014-04-28 10:35:24 ----D---- C:\Program Files\CCleaner
2014-04-23 16:13:04 ----D---- C:\WINDOWS\rescache
2014-04-17 15:04:43 ----RSD---- C:\WINDOWS\assembly
2014-04-17 13:24:28 ----SHD---- C:\$Recycle.Bin
2014-04-11 21:23:27 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-04-11 21:22:20 ----D---- C:\Program Files\Microsoft Office 15
2014-04-10 14:42:48 ----D---- C:\WINDOWS\apppatch
2014-04-10 13:43:28 ----D---- C:\WINDOWS\Logs
2014-04-10 13:30:02 ----RD---- C:\WINDOWS\ToastData
2014-04-10 13:29:59 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-04-10 13:29:58 ----D---- C:\WINDOWS\PolicyDefinitions
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\wbem
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\setup
2014-04-10 13:29:55 ----D---- C:\WINDOWS\system32\cs-CZ
2014-04-10 13:29:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-10 13:29:53 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-04-10 13:29:53 ----D---- C:\WINDOWS\system32\en-US
2014-04-10 13:29:53 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-04-10 13:29:53 ----D---- C:\Program Files\Internet Explorer
2014-04-10 13:29:38 ----D---- C:\WINDOWS\WinStore
2014-04-10 13:29:38 ----D---- C:\WINDOWS\servicing
2014-04-10 13:29:38 ----D---- C:\WINDOWS\MediaViewer
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Portable Devices
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Multimedia Platform
2014-04-10 13:29:38 ----D---- C:\Program Files\Windows Media Player
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2014-04-10 13:29:38 ----D---- C:\Program Files (x86)\Windows Media Player
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-04-10 13:29:37 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-04-10 13:29:33 ----D---- C:\WINDOWS\cs-CZ
2014-04-10 13:29:32 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\zh-TW
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\zh-CN
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\uk-UA
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\Sysprep
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sv-SE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sl-SI
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\sk-SK
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ru-RU
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ro-RO
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\pt-PT
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\pl-PL
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\oobe
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\migration
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\lv-LV
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ko-KR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\ja-JP
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\it-IT
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\hu-HU
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\hr-HR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\he-IL
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\fr-FR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\fi-FI
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\et-EE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\es-ES
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\en-GB
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\el-GR
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\de-DE
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\da-DK
2014-04-10 13:29:32 ----D---- C:\WINDOWS\system32\bg-BG
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\zh-HK
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\tr-TR
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\th-TH
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\pt-BR
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\nl-NL
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\nb-NO
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\migwiz
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\lt-LT
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\drivers\en-US
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\Dism
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\Boot
2014-04-10 13:29:31 ----D---- C:\WINDOWS\system32\ar-SA
2014-04-10 13:29:29 ----RSD---- C:\WINDOWS\Fonts
2014-04-10 13:29:29 ----D---- C:\WINDOWS\Camera
2014-04-10 13:29:28 ----D---- C:\WINDOWS\FileManager
2014-04-10 13:29:16 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-04-10 13:05:07 ----D---- C:\WINDOWS\system32\catroot2
2014-04-10 12:29:17 ----D---- C:\ProgramData\Microsoft Help
2014-04-10 12:28:20 ----D---- C:\WINDOWS\system32\MRT
2014-04-10 12:07:39 ----D---- C:\Users\Zdeněk\AppData\Roaming\DRPSu
2014-04-10 11:56:11 ----D---- C:\WINDOWS\system32\drivers\etc
log III
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\WINDOWS\System32\drivers\ACPI.sys [2014-02-22 539992]
R0 acpiex;Microsoft ACPIEx Driver; C:\WINDOWS\System32\Drivers\acpiex.sys [2013-08-22 79712]
R0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\WINDOWS\System32\drivers\atapi.sys [2013-08-22 26464]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\WINDOWS\System32\drivers\CLFS.sys [2014-03-20 376152]
R0 CNG;CNG; C:\WINDOWS\System32\Drivers\cng.sys [2014-03-08 565536]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\WINDOWS\System32\drivers\disk.sys [2013-08-22 100192]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\WINDOWS\System32\drivers\fileinfo.sys [2014-02-22 79192]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\WINDOWS\system32\drivers\fltmgr.sys [2014-02-22 360792]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\WINDOWS\System32\DRIVERS\fvevol.sys [2014-02-22 590168]
R0 intelide;intelide; C:\WINDOWS\System32\drivers\intelide.sys [2013-08-22 18272]
R0 intelpep;@intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) Power Engine Plug-in Driver; C:\WINDOWS\System32\drivers\intelpep.sys [2014-01-18 39768]
R0 KSecDD;KSecDD; C:\WINDOWS\System32\Drivers\ksecdd.sys [2013-11-14 101208]
R0 KSecPkg;KSecPkg; C:\WINDOWS\System32\Drivers\ksecpkg.sys [2014-03-08 180056]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\WINDOWS\System32\drivers\mountmgr.sys [2013-08-22 101728]
R0 msisadrv;msisadrv; C:\WINDOWS\System32\drivers\msisadrv.sys [2013-08-22 17248]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\WINDOWS\System32\Drivers\mup.sys [2013-08-22 78688]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\WINDOWS\system32\drivers\ndis.sys [2014-02-22 1118552]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\WINDOWS\System32\drivers\partmgr.sys [2013-08-22 88928]
R0 pci;@machine.inf,%pci_svcdesc%;Řadič sběrnice PCI; C:\WINDOWS\System32\drivers\pci.sys [2014-02-22 280920]
R0 pcw;Performance Counters for Windows Driver; C:\WINDOWS\System32\drivers\pcw.sys [2013-08-22 50016]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\WINDOWS\system32\drivers\pdc.sys [2014-01-18 86872]
R0 PxHlpa64;PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [2012-06-22 56336]
R0 rdyboost;ReadyBoost; C:\WINDOWS\System32\drivers\rdyboost.sys [2014-02-22 249688]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2013-07-20 275552]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\WINDOWS\System32\drivers\spaceport.sys [2014-02-22 384856]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\WINDOWS\System32\drivers\tcpip.sys [2014-03-04 2519384]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\WINDOWS\System32\drivers\vdrvroot.sys [2013-08-22 37728]
R0 vididr;@oem5.inf,%VddServiceName%;Acronis Virtual Disk; C:\WINDOWS\System32\drivers\vididr.sys [2013-07-20 210016]
R0 vidsflt53;Acronis Disk Storage Filter (53); C:\WINDOWS\system32\DRIVERS\vsflt53.sys [2013-07-25 141920]
R0 vmci;@oem32.inf,%vmci.Service.DispName%;VMware VMCI Bus Driver; C:\WINDOWS\System32\drivers\vmci.sys [2013-10-08 85584]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\WINDOWS\System32\drivers\volmgr.sys [2013-08-22 73568]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\WINDOWS\System32\drivers\volmgrx.sys [2013-08-22 377696]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\WINDOWS\System32\drivers\volsnap.sys [2014-02-22 311640]
R0 vsock;vSockets Driver; C:\WINDOWS\system32\drivers\vsock.sys [2013-10-08 73296]
R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\WINDOWS\system32\drivers\Wdf01000.sys [2013-08-22 839488]
R0 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\WINDOWS\system32\drivers\WdFilter.sys [2013-10-31 236888]
R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\WINDOWS\system32\DRIVERS\wfplwfs.sys [2014-03-08 136024]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\WINDOWS\system32\drivers\afd.sys [2013-08-22 567296]
R1 ahcache;@%systemroot%\system32\drivers\ahcache.sys,-102; C:\WINDOWS\system32\DRIVERS\ahcache.sys [2013-08-22 76800]
R1 BasicDisplay;BasicDisplay; C:\WINDOWS\System32\drivers\BasicDisplay.sys [2013-08-22 50688]
R1 BasicRender;BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [2014-02-22 33280]
R1 Beep;Beep; C:\WINDOWS\system32\drivers\Beep.sys [2013-08-22 7680]
R1 cbfs4-0;cbfs4-0; \??\C:\Program Files (x86)\Common Files\CBFS\cbfs4.sys [2013-03-01 385728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\WINDOWS\system32\drivers\csc.sys [2013-11-14 559616]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\WINDOWS\System32\Drivers\dfsc.sys [2014-03-06 134144]
R1 Msfs;Msfs; C:\WINDOWS\system32\drivers\Msfs.sys [2013-08-22 30208]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\WINDOWS\System32\drivers\mssmbios.sys [2013-08-22 37728]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\WINDOWS\system32\DRIVERS\netbios.sys [2013-08-22 48128]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\WINDOWS\System32\DRIVERS\netbt.sys [2013-08-22 282624]
R1 Npfs;Npfs; C:\WINDOWS\system32\drivers\Npfs.sys [2013-08-22 58880]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\WINDOWS\System32\drivers\npsvctrig.sys [2013-08-22 23040]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\WINDOWS\system32\drivers\nsiproxy.sys [2013-08-22 39936]
R1 Null;Null; C:\WINDOWS\system32\drivers\Null.sys [2013-08-22 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\WINDOWS\system32\DRIVERS\pacer.sys [2013-08-22 151552]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\WINDOWS\system32\DRIVERS\rdbss.sys [2013-12-17 408576]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\WINDOWS\system32\DRIVERS\tdx.sys [2013-08-22 107520]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys [2014-02-27 54464]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\WINDOWS\system32\DRIVERS\lltdio.sys [2013-08-22 59392]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\WINDOWS\system32\drivers\luafv.sys [2014-02-22 124416]
R2 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys [2014-03-06 283648]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\WINDOWS\system32\drivers\Ndu.sys [2013-08-22 103424]
R2 PEAUTH;PEAUTH; C:\WINDOWS\system32\drivers\peauth.sys [2014-02-22 663040]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2013-08-22 80384]
R2 secdrv;Security Driver; C:\WINDOWS\system32\drivers\secdrv.sys [2013-08-22 23040]
R2 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\WINDOWS\System32\DRIVERS\srv.sys [2013-11-14 454656]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\WINDOWS\System32\drivers\tcpipreg.sys [2014-03-06 49152]
R2 VMnetBridge;@oem30.inf,%VMware_Desc%;VMware Bridge Protocol; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [2014-04-14 46160]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\WINDOWS\system32\drivers\vmnetuserif.sys [2014-04-14 31448]
R2 vmx86;VMware vmx86; \??\C:\WINDOWS\system32\drivers\vmx86.sys [2014-04-14 64728]
R2 vstor2-mntapi20-shared;Vstor2 MntApi 2.0 Driver (shared); C:\WINDOWS\SysWOW64\drivers\vstor2-mntapi20-shared.sys [2013-02-22 33872]
R3 ADIHdAudAddService;@oem25.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2010-06-15 445952]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-06-19 11926016]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-06-19 360448]
R3 atmeltpm;atmeltpm; C:\WINDOWS\System32\drivers\atmeltpm64.sys [2011-08-05 19456]
R3 b57nd60a;@netb57va.inf,%SvcDispName%;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\system32\DRIVERS\b57nd60a.sys [2013-06-18 425984]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\WINDOWS\system32\DRIVERS\bowser.sys [2013-08-22 102912]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\WINDOWS\System32\drivers\CompositeBus.sys [2013-08-22 36352]
R3 condrv;Console Driver; C:\WINDOWS\System32\drivers\condrv.sys [2013-08-22 43008]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\WINDOWS\System32\drivers\dxgkrnl.sys [2014-03-06 1557848]
R3 fastfat;FAT12/16/32 File System Driver; C:\WINDOWS\system32\drivers\fastfat.sys [2013-08-22 217952]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\drivers\HDAudBus.sys [2013-08-22 78336]
R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\WINDOWS\System32\drivers\hidusb.sys [2014-03-06 33280]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\WINDOWS\system32\drivers\HTTP.sys [2014-01-29 994136]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\WINDOWS\System32\drivers\intelppm.sys [2013-08-22 98816]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\WINDOWS\System32\drivers\kbdclass.sys [2013-08-22 58208]
R3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\WINDOWS\System32\drivers\kbdhid.sys [2013-08-22 32256]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Miniport ladění jádra společnosti Microsoft (NDIS 6.20); C:\WINDOWS\system32\DRIVERS\kdnic.sys [2013-08-22 19456]
R3 ksthunk;Kernel Streaming Thunks; C:\WINDOWS\system32\drivers\ksthunk.sys [2013-08-22 21248]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\WINDOWS\System32\drivers\monitor.sys [2013-08-22 30208]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\WINDOWS\System32\drivers\mouclass.sys [2013-08-22 51040]
R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\WINDOWS\System32\drivers\mouhid.sys [2013-08-22 30208]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\WINDOWS\System32\drivers\mpsdrv.sys [2013-08-22 74240]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [2014-03-06 402944]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys [2013-11-14 207360]
R3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\WINDOWS\system32\DRIVERS\mslldp.sys [2013-08-22 66560]
R3 NdisVirtualBus;@%SystemRoot%\System32\drivers\NdisVirtualBus.sys,-200; C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [2013-08-22 16384]
R3 Ntfs;Ntfs; C:\WINDOWS\system32\drivers\Ntfs.sys [2014-03-20 2013016]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\WINDOWS\System32\drivers\rdpbus.sys [2013-08-22 22528]
R3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\WINDOWS\System32\drivers\rdpdr.sys [2013-11-14 195584]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\WINDOWS\System32\drivers\rdpvideominiport.sys [2013-11-14 27488]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\WINDOWS\System32\DRIVERS\srv2.sys [2014-03-06 679424]
R3 srvnet;srvnet; C:\WINDOWS\System32\DRIVERS\srvnet.sys [2014-03-06 245760]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\WINDOWS\System32\drivers\swenum.sys [2013-08-22 14176]
R3 TplinkUDSMBus;TplinkUDSMBus; C:\WINDOWS\system32\drivers\TplinkUDSMBus.sys [2012-09-21 102688]
R3 TplinkUDSTcpBus;TplinkUDSTcpBus; C:\WINDOWS\system32\drivers\TplinkUDSTcpBus.sys [2012-09-21 181024]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\WINDOWS\system32\drivers\tpm.sys [2013-08-22 159584]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunnel.sys [2013-08-22 154112]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\WINDOWS\System32\drivers\umbus.sys [2013-08-22 46080]
R3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Ovladač Microsoft UMPass; C:\WINDOWS\System32\drivers\umpass.sys [2013-08-22 11776]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\drivers\usbccgp.sys [2013-11-14 155480]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\WINDOWS\System32\drivers\usbehci.sys [2013-08-22 89952]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\drivers\usbhub.sys [2013-08-22 422240]
R3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\WINDOWS\System32\drivers\USBSTOR.SYS [2014-02-22 148824]
R3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\drivers\usbuhci.sys [2013-08-22 34816]
R3 VMnetAdapter;@oem31.inf,%VMnetAdapter.Service.DispName%;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [2014-04-14 20560]
R3 WdNisDrv;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-370; C:\WINDOWS\system32\Drivers\WdNisDrv.sys [2013-10-31 124760]
S0 3ware;3ware; C:\WINDOWS\System32\drivers\3ware.sys [2013-08-22 108896]
S0 ADP80XX;ADP80XX; C:\WINDOWS\System32\drivers\ADP80XX.SYS [2013-08-22 782176]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\WINDOWS\System32\drivers\agp440.sys [2013-08-22 62304]
S0 amdsata;amdsata; C:\WINDOWS\System32\drivers\amdsata.sys [2013-08-22 79200]
S0 amdsbs;amdsbs; C:\WINDOWS\System32\drivers\amdsbs.sys [2013-08-22 259424]
S0 amdxata;amdxata; C:\WINDOWS\System32\drivers\amdxata.sys [2013-08-22 25952]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Storport's Miniport Driver; C:\WINDOWS\System32\drivers\arcsas.sys [2013-08-22 114016]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\WINDOWS\System32\drivers\bxvbda.sys [2013-08-22 531296]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\WINDOWS\System32\drivers\evbda.sys [2013-08-22 3357024]
S0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\WINDOWS\System32\drivers\EhStorClass.sys [2013-08-22 82784]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [2013-08-22 114016]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\System32\drivers\gagp30kx.sys [2013-08-22 65888]
S0 HpSAMD;HpSAMD; C:\WINDOWS\System32\drivers\HpSAMD.sys [2013-08-22 64352]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\WINDOWS\System32\drivers\hwpolicy.sys [2013-08-22 24416]
S0 iaStorAV;@iastorav.inf,%iaStorAV.DeviceDesc%;Intel(R) SATA RAID Controller Windows; C:\WINDOWS\System32\drivers\iaStorAV.sys [2013-08-10 651248]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\WINDOWS\System32\drivers\iaStorV.sys [2013-08-22 412000]
S0 isapnp;isapnp; C:\WINDOWS\System32\drivers\isapnp.sys [2013-08-22 21856]
S0 LSI_SAS;LSI_SAS; C:\WINDOWS\System32\drivers\lsi_sas.sys [2013-08-22 109408]
S0 LSI_SAS2;LSI_SAS2; C:\WINDOWS\System32\drivers\lsi_sas2.sys [2013-08-22 93536]
S0 LSI_SAS3;LSI_SAS3; C:\WINDOWS\System32\drivers\lsi_sas3.sys [2013-08-22 81760]
S0 LSI_SSS;LSI_SSS; C:\WINDOWS\System32\drivers\lsi_sss.sys [2013-08-22 82784]
S0 megasas;megasas; C:\WINDOWS\System32\drivers\megasas.sys [2013-08-22 56672]
S0 megasr;megasr; C:\WINDOWS\System32\drivers\megasr.sys [2013-08-22 575840]
S0 mvumis;mvumis; C:\WINDOWS\System32\drivers\mvumis.sys [2013-08-22 63840]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\System32\drivers\nv_agp.sys [2013-08-22 124768]
S0 nvraid;nvraid; C:\WINDOWS\System32\drivers\nvraid.sys [2013-08-22 150368]
S0 nvstor;nvstor; C:\WINDOWS\System32\drivers\nvstor.sys [2013-08-22 168288]
S0 pciide;pciide; C:\WINDOWS\System32\drivers\pciide.sys [2013-08-22 14688]
S0 pcmcia;pcmcia; C:\WINDOWS\System32\drivers\pcmcia.sys [2013-08-22 114528]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\WINDOWS\System32\drivers\sbp2port.sys [2013-08-22 107872]
S0 SiSRaid2;SiSRaid2; C:\WINDOWS\System32\drivers\SiSRaid2.sys [2013-08-22 44896]
S0 SiSRaid4;SiSRaid4; C:\WINDOWS\System32\drivers\sisraid4.sys [2013-08-22 81760]
S0 stexstor;stexstor; C:\WINDOWS\System32\drivers\stexstor.sys [2013-08-22 31072]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\WINDOWS\System32\drivers\storahci.sys [2013-08-22 107872]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\WINDOWS\system32\DRIVERS\vmstorfl.sys [2013-08-22 49984]
S0 stornvme;@stornvme.inf,%StorNVMe_ServiceDesc%;Microsoft Standard NVM Express Driver; C:\WINDOWS\System32\drivers\stornvme.sys [2013-11-14 57176]
S0 storvsc;storvsc; C:\WINDOWS\System32\drivers\storvsc.sys [2013-08-22 45888]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Filtr Microsoft AGPv3.5; C:\WINDOWS\System32\drivers\uagp35.sys [2013-08-22 64864]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\WINDOWS\System32\drivers\uliagpkx.sys [2013-08-22 65888]
S0 viaide;viaide; C:\WINDOWS\System32\drivers\viaide.sys [2013-08-22 19808]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\WINDOWS\System32\drivers\vmbus.sys [2013-08-22 97088]
S0 vsmraid;vsmraid; C:\WINDOWS\System32\drivers\vsmraid.sys [2013-08-22 168800]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage RAID Controller Windows Driver; C:\WINDOWS\System32\drivers\vstxraid.sys [2013-08-22 305504]
S0 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\WINDOWS\system32\drivers\WdBoot.sys [2013-10-31 35856]
S1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\WINDOWS\System32\drivers\cdrom.sys [2013-08-22 164352]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\WINDOWS\system32\drivers\dam.sys [2013-08-22 57696]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\WINDOWS\System32\drivers\1394ohci.sys [2013-08-22 231424]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\WINDOWS\System32\drivers\acpipagr.sys [2013-08-22 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\WINDOWS\System32\drivers\acpipmi.sys [2013-08-22 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\WINDOWS\System32\drivers\acpitime.sys [2013-08-22 10752]
S3 AiCharger;AiCharger; C:\WINDOWS\SysWow64\drivers\AiCharger.sys [2012-03-22 14848]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\WINDOWS\System32\drivers\amdk8.sys [2013-08-22 95744]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\WINDOWS\System32\drivers\amdppm.sys [2013-08-22 98816]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\WINDOWS\system32\drivers\appid.sys [2013-11-14 83456]
S3 bcmfn2;@bcmfn2.inf,%bcmfn2.SVCDESC%;bcmfn2 Service; C:\WINDOWS\System32\drivers\bcmfn2.sys [2013-08-13 17624]
S3 bthav;Bluetooth AV Profile; C:\WINDOWS\system32\drivers\bthav.sys [2008-07-10 40448]
S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\WINDOWS\System32\drivers\BthAvrcpTg.sys [2013-08-22 36992]
S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\WINDOWS\System32\drivers\bthhfenum.sys [2013-08-22 57856]
S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\WINDOWS\System32\drivers\BthHFHid.sys [2013-08-22 30720]
S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\WINDOWS\System32\drivers\bthmodem.sys [2013-08-22 63488]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\WINDOWS\System32\drivers\circlass.sys [2013-08-22 44032]
S3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\System32\drivers\CmBatt.sys [2013-08-22 25472]
S3 dmvsc;dmvsc; C:\WINDOWS\System32\drivers\dmvsc.sys [2013-08-22 29696]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers; C:\WINDOWS\system32\drivers\drmkaud.sys [2013-08-22 14560]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-03-20 21712]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\WINDOWS\System32\drivers\errdev.sys [2013-08-22 10240]
S3 exfat;exFAT File System Driver; C:\WINDOWS\system32\drivers\exfat.sys [2013-08-22 200704]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\WINDOWS\System32\drivers\fdc.sys [2013-08-22 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\WINDOWS\system32\drivers\filetrace.sys [2013-08-22 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\WINDOWS\System32\drivers\flpydisk.sys [2013-08-22 25088]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\WINDOWS\System32\drivers\FsDepends.sys [2013-08-22 56672]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\WINDOWS\System32\drivers\fxppm.sys [2013-08-22 27136]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V – Čítač generací; C:\WINDOWS\System32\drivers\vmgencounter.sys [2013-08-22 11264]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\WINDOWS\System32\Drivers\msgpioclx.sys [2014-02-22 146776]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\WINDOWS\System32\drivers\HidBatt.sys [2013-08-22 26624]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\WINDOWS\System32\drivers\hidbth.sys [2013-08-22 96768]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\WINDOWS\System32\drivers\hidi2c.sys [2013-08-22 41472]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\WINDOWS\System32\drivers\hidir.sys [2013-08-22 45568]
S3 hyperkbd;hyperkbd; C:\WINDOWS\System32\drivers\hyperkbd.sys [2013-08-22 13824]
S3 HyperVideo;HyperVideo; C:\WINDOWS\system32\DRIVERS\HyperVideo.sys [2013-08-22 22016]
S3 i8042prt;@keyboard.inf,%i8042prt.SvcDesc%;Ovladač portu klávesnice i8042 a myši PS/2; C:\WINDOWS\System32\drivers\i8042prt.sys [2013-08-22 107520]
S3 iaLPSSi_GPIO;@ialpssi_gpio.inf,%iaLPSSi_GPIO.SVCDESC%;Intel(R) Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [2013-07-30 24568]
S3 iaLPSSi_I2C;@ialpssi_i2c.inf,%iaLPSSi_I2C.SVCDESC%;Intel(R) Serial IO I2C Controller Driver; C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [2013-07-25 99320]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [2013-08-22 84992]
S3 IPMIDRV;IPMIDRV; C:\WINDOWS\System32\drivers\IPMIDrv.sys [2014-03-06 79360]
S3 IPNAT;IP Network Address Translator; C:\WINDOWS\System32\drivers\ipnat.sys [2013-11-27 142848]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\WINDOWS\system32\drivers\irenum.sys [2013-08-22 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\WINDOWS\System32\drivers\msiscsi.sys [2013-08-22 274784]
S3 kbldfltr;kbldfltr; C:\WINDOWS\system32\drivers\kbldfltr.sys [2013-11-14 22272]
S3 Modem;Modem; C:\WINDOWS\system32\drivers\modem.sys [2013-08-22 40960]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\WINDOWS\system32\drivers\mrxdav.sys [2014-03-06 140288]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\WINDOWS\system32\DRIVERS\bridge.sys [2013-08-22 115712]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;Common Driver for Buttons, DockMode and Laptop/Slate Indicator; C:\WINDOWS\System32\drivers\msgpiowin32.sys [2013-08-22 41824]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\WINDOWS\System32\drivers\mshidkmdf.sys [2013-08-22 8192]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\WINDOWS\System32\drivers\mshidumdf.sys [2013-08-22 9728]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Server proxy služby datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSKSSRV.sys [2013-08-22 10624]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Server proxy hodin datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSPCLOCK.sys [2013-08-22 7040]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Server proxy správce kvality datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSPQM.sys [2013-08-22 6784]
S3 MsRPC;MsRPC; C:\WINDOWS\system32\drivers\MsRPC.sys [2013-08-22 366432]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2013-08-22 7936]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\WINDOWS\System32\drivers\MTConfig.sys [2013-08-22 13312]
S3 mvusbews;@oem12.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\WINDOWS\system32\DRIVERS\nwifi.sys [2014-03-06 443392]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\WINDOWS\system32\DRIVERS\ndiscap.sys [2013-08-22 43008]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys [2013-08-22 124928]
S3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\WINDOWS\system32\DRIVERS\ndistapi.sys [2013-08-22 24576]
S3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\ndisuio.sys [2013-08-22 60416]
S3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\WINDOWS\system32\DRIVERS\ndiswan.sys [2013-08-22 220672]
S3 NdisWanLegacy;@%systemroot%\system32\rascfg.dll,-32014; C:\WINDOWS\system32\DRIVERS\ndiswan.sys [2013-08-22 220672]
S3 NDProxy;NDIS Proxy; C:\WINDOWS\system32\drivers\NDProxy.sys [2013-08-22 72192]
S3 Netaapl;@oem9.inf,%Netaapl.Service.DispName%;Apple Mobile Device Ethernet Service; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 netvsc;netvsc; C:\WINDOWS\system32\DRIVERS\netvsc63.sys [2013-08-22 87040]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\WINDOWS\System32\drivers\parport.sys [2013-08-22 94208]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\WINDOWS\System32\drivers\processr.sys [2013-08-22 92160]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\WINDOWS\system32\drivers\qwavedrv.sys [2013-08-22 47104]
S3 RasAcd;Remote Access Auto Connection Driver; C:\WINDOWS\System32\DRIVERS\rasacd.sys [2013-08-22 17408]
S3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\WINDOWS\system32\DRIVERS\raspppoe.sys [2013-08-22 84992]
S3 ReFS;ReFS; C:\WINDOWS\system32\drivers\ReFS.sys [2014-02-22 924504]
S3 s3cap;s3cap; C:\WINDOWS\System32\drivers\vms3cap.sys [2013-08-22 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\WINDOWS\System32\DRIVERS\scfilter.sys [2013-08-22 40960]
S3 sdbus;sdbus; C:\WINDOWS\System32\drivers\sdbus.sys [2014-02-22 236888]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\WINDOWS\System32\drivers\sdstor.sys [2014-02-22 79192]
S3 SerCx;Serial UART Support Library; C:\WINDOWS\system32\drivers\SerCx.sys [2013-08-22 69472]
S3 SerCx2;Serial UART Support Library; C:\WINDOWS\system32\drivers\SerCx2.sys [2014-01-18 146776]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\WINDOWS\System32\drivers\serenum.sys [2013-08-22 23040]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\WINDOWS\System32\drivers\serial.sys [2013-08-22 83456]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\WINDOWS\System32\drivers\sermouse.sys [2013-08-22 26112]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\WINDOWS\System32\drivers\sfloppy.sys [2013-08-22 17408]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\WINDOWS\system32\drivers\SpbCx.sys [2013-08-22 72032]
S3 storvsp;storvsp; C:\WINDOWS\System32\drivers\storvsp.sys [2013-11-14 68608]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2013-04-18 16152]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\WINDOWS\system32\DRIVERS\tcpip.sys [2014-03-04 2519384]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2013-10-17 35112]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\WINDOWS\System32\drivers\terminpt.sys [2013-11-14 37216]
S3 TsUsbFlt;TsUsbFlt; C:\WINDOWS\system32\drivers\tsusbflt.sys [2013-08-22 56320]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\WINDOWS\System32\drivers\TsUsbGD.sys [2013-08-22 29696]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\WINDOWS\System32\drivers\uaspstor.sys [2013-08-22 74080]
S3 UCX01000;USB Controller Extension; C:\WINDOWS\System32\drivers\ucx01000.sys [2014-02-22 189784]
S3 UEFI;@uefi.inf,%UEFI.SvcDesc%;Microsoft UEFI Driver; C:\WINDOWS\System32\drivers\UEFI.sys [2013-08-22 26976]
S3 USBAAPL64;@oem3.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\WINDOWS\System32\drivers\usbcir.sys [2013-08-22 98304]
S3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\WINDOWS\System32\drivers\UsbHub3.sys [2014-03-08 467800]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\System32\drivers\usbohci.sys [2013-08-22 30208]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\WINDOWS\System32\drivers\usbprint.sys [2013-08-22 26112]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\WINDOWS\System32\drivers\USBXHCI.SYS [2014-02-22 325464]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\WINDOWS\system32\drivers\VerifierExt.sys [2013-11-14 175960]
S3 vhdmp;vhdmp; C:\WINDOWS\System32\drivers\vhdmp.sys [2014-01-29 551256]
S3 Vid;Vid; C:\WINDOWS\System32\drivers\Vid.sys [2013-11-14 220672]
S3 VMBusHID;VMBusHID; C:\WINDOWS\System32\drivers\VMBusHID.sys [2013-08-22 21760]
S3 vmbusr;@%SystemRoot%\system32\drivers\vmbusr.sys,-1001; C:\WINDOWS\System32\drivers\vmbusr.sys [2013-11-14 129536]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\WINDOWS\System32\drivers\vpci.sys [2013-08-22 69472]
S3 vpcivsp;@wvpcivsp.inf,%vpcivsp.SVCDESC%;Microsoft Hyper-V PCI Server; C:\WINDOWS\System32\drivers\vpcivsp.sys [2013-11-14 65536]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\WINDOWS\System32\drivers\vwifibus.sys [2013-08-22 24576]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\WINDOWS\System32\drivers\wacompen.sys [2013-08-22 26752]
S4 cdfs;CD/DVD File System Reader; C:\WINDOWS\system32\DRIVERS\cdfs.sys [2013-08-22 88576]
S4 udfs;udfs; C:\WINDOWS\system32\DRIVERS\udfs.sys [2013-08-22 316928]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2012-04-27 1191648]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AirPrint;AirPrint; C:\Program Files (x86)\AirPrint\airprint.exe [2013-03-28 234784]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-03-30 2211000]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 d0e87c27;SW-Sustainer; C:\WINDOWS\syswow64\rundll32.exe [2013-08-22 49664]
R2 DcomLaunch;@combase.dll,-5012; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 EventSystem;@comres.dll,-2450; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 gpsvc;@gpapi.dll,-112; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-10-15 136192]
R2 HPSIService;HP SI Service; C:\WINDOWS\system32\HPSIsvc.exe [2012-11-08 126856]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 RalinkRegistryWriter;RalinkRegistryWriter; C:\Program Files (x86)\Ralink\Common\RaRegistry.exe [2012-07-04 372736]
R2 RalinkRegistryWriter64;RalinkRegistryWriter64; C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe [2012-07-04 447488]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 RpcSs;@combase.dll,-5010; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\WINDOWS\System32\spoolsv.exe [2013-08-22 798208]
R2 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2014-04-14 86744]
R2 VMnetDHCP;VMware DHCP Service; C:\WINDOWS\syswow64\vmnetdhcp.exe [2014-04-14 359128]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2014-02-27 906432]
R2 VMware NAT Service;VMware NAT Service; C:\WINDOWS\syswow64\vmnat.exe [2014-04-14 437976]
R2 VMwareHostd;VMware Workstation Server; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [2014-04-14 14407384]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 Browser;@%systemroot%\system32\browser.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 NcbService;@%SystemRoot%\system32\ncbservice.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
R3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdNisSvc;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320; C:\Program Files\Windows Defender\NisSrv.exe [2013-10-31 348392]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 116648]
S2 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
S2 RaMediaServer;Ralink UPnP Media Server; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [2012-07-06 1863680]
S2 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\WINDOWS\system32\sppsvc.exe [2013-12-21 6353960]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\WINDOWS\System32\alg.exe [2013-08-22 92672]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AppMgmt;@appmgmts.dll,-3250; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AppReadiness;@%SystemRoot%\System32\AppReadiness.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 AppXSvc;@%SystemRoot%\system32\appxdeploymentserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 COMSysApp;@comres.dll,-947; C:\WINDOWS\system32\dllhost.exe [2013-08-22 19296]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\WINDOWS\System32\lsass.exe [2013-08-22 45008]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\WINDOWS\ehome\ehRecvr.exe [2013-11-14 697856]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\WINDOWS\ehome\ehsched.exe [2013-11-14 176128]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\WINDOWS\system32\fxssvc.exe [2013-08-22 655360]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 116648]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\WINDOWS\system32\IEEtwCollector.exe [2014-04-10 111616]
S3 KeyIso;@keyiso.dll,-100; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
S3 KtmRm;@comres.dll,-2946; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 lfsvc;@%SystemRoot%\System32\GeofenceMonitorService.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 MSDTC;@comres.dll,-2797; C:\WINDOWS\System32\msdtc.exe [2013-08-22 142848]
S3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\WINDOWS\system32\msiexec.exe [2013-08-22 62464]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-10-03 150600]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 178760]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\WINDOWS\SysWow64\perfhost.exe [2013-08-22 21504]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 PrintNotify;@C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\WINDOWS\system32\locator.exe [2013-08-22 10240]
S3 ScDeviceEnum;@%SystemRoot%\System32\ScDeviceEnum.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 smphost;@%SystemRoot%\System32\smphost.dll,-102; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\WINDOWS\System32\snmptrap.exe [2013-08-22 14848]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\WINDOWS\servicing\TrustedInstaller.exe [2014-02-22 99840]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\WINDOWS\system32\UI0Detect.exe [2013-08-22 40960]
S3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\WINDOWS\System32\vds.exe [2014-02-22 1283584]
S3 vmicguestinterface;@%systemroot%\system32\vmicres.dll,-801; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\WINDOWS\system32\vssvc.exe [2014-02-22 1436160]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\WINDOWS\system32\wbengine.exe [2014-02-22 1543680]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WebClient;@%systemroot%\system32\webclnt.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WEPHOSTSVC;@%systemroot%\system32\wephostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 MsKeyboardFilter;@%SystemRoot%\system32\KeyboardFilterSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 NeroMediaHomeService.4;Nero MediaHome 4 Service; C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe [2012-12-20 518632]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-08-10 139856]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 RemoteRegistry;@regsvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
-----------------EOF-----------------
R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\WINDOWS\System32\drivers\ACPI.sys [2014-02-22 539992]
R0 acpiex;Microsoft ACPIEx Driver; C:\WINDOWS\System32\Drivers\acpiex.sys [2013-08-22 79712]
R0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\WINDOWS\System32\drivers\atapi.sys [2013-08-22 26464]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\WINDOWS\System32\drivers\CLFS.sys [2014-03-20 376152]
R0 CNG;CNG; C:\WINDOWS\System32\Drivers\cng.sys [2014-03-08 565536]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\WINDOWS\System32\drivers\disk.sys [2013-08-22 100192]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\WINDOWS\System32\drivers\fileinfo.sys [2014-02-22 79192]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\WINDOWS\system32\drivers\fltmgr.sys [2014-02-22 360792]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\WINDOWS\System32\DRIVERS\fvevol.sys [2014-02-22 590168]
R0 intelide;intelide; C:\WINDOWS\System32\drivers\intelide.sys [2013-08-22 18272]
R0 intelpep;@intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) Power Engine Plug-in Driver; C:\WINDOWS\System32\drivers\intelpep.sys [2014-01-18 39768]
R0 KSecDD;KSecDD; C:\WINDOWS\System32\Drivers\ksecdd.sys [2013-11-14 101208]
R0 KSecPkg;KSecPkg; C:\WINDOWS\System32\Drivers\ksecpkg.sys [2014-03-08 180056]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\WINDOWS\System32\drivers\mountmgr.sys [2013-08-22 101728]
R0 msisadrv;msisadrv; C:\WINDOWS\System32\drivers\msisadrv.sys [2013-08-22 17248]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\WINDOWS\System32\Drivers\mup.sys [2013-08-22 78688]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\WINDOWS\system32\drivers\ndis.sys [2014-02-22 1118552]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\WINDOWS\System32\drivers\partmgr.sys [2013-08-22 88928]
R0 pci;@machine.inf,%pci_svcdesc%;Řadič sběrnice PCI; C:\WINDOWS\System32\drivers\pci.sys [2014-02-22 280920]
R0 pcw;Performance Counters for Windows Driver; C:\WINDOWS\System32\drivers\pcw.sys [2013-08-22 50016]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\WINDOWS\system32\drivers\pdc.sys [2014-01-18 86872]
R0 PxHlpa64;PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [2012-06-22 56336]
R0 rdyboost;ReadyBoost; C:\WINDOWS\System32\drivers\rdyboost.sys [2014-02-22 249688]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2013-07-20 275552]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\WINDOWS\System32\drivers\spaceport.sys [2014-02-22 384856]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\WINDOWS\System32\drivers\tcpip.sys [2014-03-04 2519384]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\WINDOWS\System32\drivers\vdrvroot.sys [2013-08-22 37728]
R0 vididr;@oem5.inf,%VddServiceName%;Acronis Virtual Disk; C:\WINDOWS\System32\drivers\vididr.sys [2013-07-20 210016]
R0 vidsflt53;Acronis Disk Storage Filter (53); C:\WINDOWS\system32\DRIVERS\vsflt53.sys [2013-07-25 141920]
R0 vmci;@oem32.inf,%vmci.Service.DispName%;VMware VMCI Bus Driver; C:\WINDOWS\System32\drivers\vmci.sys [2013-10-08 85584]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\WINDOWS\System32\drivers\volmgr.sys [2013-08-22 73568]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\WINDOWS\System32\drivers\volmgrx.sys [2013-08-22 377696]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\WINDOWS\System32\drivers\volsnap.sys [2014-02-22 311640]
R0 vsock;vSockets Driver; C:\WINDOWS\system32\drivers\vsock.sys [2013-10-08 73296]
R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\WINDOWS\system32\drivers\Wdf01000.sys [2013-08-22 839488]
R0 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\WINDOWS\system32\drivers\WdFilter.sys [2013-10-31 236888]
R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\WINDOWS\system32\DRIVERS\wfplwfs.sys [2014-03-08 136024]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\WINDOWS\system32\drivers\afd.sys [2013-08-22 567296]
R1 ahcache;@%systemroot%\system32\drivers\ahcache.sys,-102; C:\WINDOWS\system32\DRIVERS\ahcache.sys [2013-08-22 76800]
R1 BasicDisplay;BasicDisplay; C:\WINDOWS\System32\drivers\BasicDisplay.sys [2013-08-22 50688]
R1 BasicRender;BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [2014-02-22 33280]
R1 Beep;Beep; C:\WINDOWS\system32\drivers\Beep.sys [2013-08-22 7680]
R1 cbfs4-0;cbfs4-0; \??\C:\Program Files (x86)\Common Files\CBFS\cbfs4.sys [2013-03-01 385728]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\WINDOWS\system32\drivers\csc.sys [2013-11-14 559616]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\WINDOWS\System32\Drivers\dfsc.sys [2014-03-06 134144]
R1 Msfs;Msfs; C:\WINDOWS\system32\drivers\Msfs.sys [2013-08-22 30208]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\WINDOWS\System32\drivers\mssmbios.sys [2013-08-22 37728]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\WINDOWS\system32\DRIVERS\netbios.sys [2013-08-22 48128]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\WINDOWS\System32\DRIVERS\netbt.sys [2013-08-22 282624]
R1 Npfs;Npfs; C:\WINDOWS\system32\drivers\Npfs.sys [2013-08-22 58880]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\WINDOWS\System32\drivers\npsvctrig.sys [2013-08-22 23040]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\WINDOWS\system32\drivers\nsiproxy.sys [2013-08-22 39936]
R1 Null;Null; C:\WINDOWS\system32\drivers\Null.sys [2013-08-22 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\WINDOWS\system32\DRIVERS\pacer.sys [2013-08-22 151552]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\WINDOWS\system32\DRIVERS\rdbss.sys [2013-12-17 408576]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\WINDOWS\system32\DRIVERS\tdx.sys [2013-08-22 107520]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys [2014-02-27 54464]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\WINDOWS\system32\DRIVERS\lltdio.sys [2013-08-22 59392]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\WINDOWS\system32\drivers\luafv.sys [2014-02-22 124416]
R2 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys [2014-03-06 283648]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\WINDOWS\system32\drivers\Ndu.sys [2013-08-22 103424]
R2 PEAUTH;PEAUTH; C:\WINDOWS\system32\drivers\peauth.sys [2014-02-22 663040]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2013-08-22 80384]
R2 secdrv;Security Driver; C:\WINDOWS\system32\drivers\secdrv.sys [2013-08-22 23040]
R2 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\WINDOWS\System32\DRIVERS\srv.sys [2013-11-14 454656]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\WINDOWS\System32\drivers\tcpipreg.sys [2014-03-06 49152]
R2 VMnetBridge;@oem30.inf,%VMware_Desc%;VMware Bridge Protocol; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [2014-04-14 46160]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\WINDOWS\system32\drivers\vmnetuserif.sys [2014-04-14 31448]
R2 vmx86;VMware vmx86; \??\C:\WINDOWS\system32\drivers\vmx86.sys [2014-04-14 64728]
R2 vstor2-mntapi20-shared;Vstor2 MntApi 2.0 Driver (shared); C:\WINDOWS\SysWOW64\drivers\vstor2-mntapi20-shared.sys [2013-02-22 33872]
R3 ADIHdAudAddService;@oem25.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2010-06-15 445952]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2012-06-19 11926016]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2012-06-19 360448]
R3 atmeltpm;atmeltpm; C:\WINDOWS\System32\drivers\atmeltpm64.sys [2011-08-05 19456]
R3 b57nd60a;@netb57va.inf,%SvcDispName%;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\system32\DRIVERS\b57nd60a.sys [2013-06-18 425984]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\WINDOWS\system32\DRIVERS\bowser.sys [2013-08-22 102912]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\WINDOWS\System32\drivers\CompositeBus.sys [2013-08-22 36352]
R3 condrv;Console Driver; C:\WINDOWS\System32\drivers\condrv.sys [2013-08-22 43008]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\WINDOWS\System32\drivers\dxgkrnl.sys [2014-03-06 1557848]
R3 fastfat;FAT12/16/32 File System Driver; C:\WINDOWS\system32\drivers\fastfat.sys [2013-08-22 217952]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\drivers\HDAudBus.sys [2013-08-22 78336]
R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\WINDOWS\System32\drivers\hidusb.sys [2014-03-06 33280]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\WINDOWS\system32\drivers\HTTP.sys [2014-01-29 994136]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\WINDOWS\System32\drivers\intelppm.sys [2013-08-22 98816]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\WINDOWS\System32\drivers\kbdclass.sys [2013-08-22 58208]
R3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\WINDOWS\System32\drivers\kbdhid.sys [2013-08-22 32256]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Miniport ladění jádra společnosti Microsoft (NDIS 6.20); C:\WINDOWS\system32\DRIVERS\kdnic.sys [2013-08-22 19456]
R3 ksthunk;Kernel Streaming Thunks; C:\WINDOWS\system32\drivers\ksthunk.sys [2013-08-22 21248]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\WINDOWS\System32\drivers\monitor.sys [2013-08-22 30208]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\WINDOWS\System32\drivers\mouclass.sys [2013-08-22 51040]
R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\WINDOWS\System32\drivers\mouhid.sys [2013-08-22 30208]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\WINDOWS\System32\drivers\mpsdrv.sys [2013-08-22 74240]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [2014-03-06 402944]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys [2013-11-14 207360]
R3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\WINDOWS\system32\DRIVERS\mslldp.sys [2013-08-22 66560]
R3 NdisVirtualBus;@%SystemRoot%\System32\drivers\NdisVirtualBus.sys,-200; C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [2013-08-22 16384]
R3 Ntfs;Ntfs; C:\WINDOWS\system32\drivers\Ntfs.sys [2014-03-20 2013016]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\WINDOWS\System32\drivers\rdpbus.sys [2013-08-22 22528]
R3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\WINDOWS\System32\drivers\rdpdr.sys [2013-11-14 195584]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\WINDOWS\System32\drivers\rdpvideominiport.sys [2013-11-14 27488]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\WINDOWS\System32\DRIVERS\srv2.sys [2014-03-06 679424]
R3 srvnet;srvnet; C:\WINDOWS\System32\DRIVERS\srvnet.sys [2014-03-06 245760]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\WINDOWS\System32\drivers\swenum.sys [2013-08-22 14176]
R3 TplinkUDSMBus;TplinkUDSMBus; C:\WINDOWS\system32\drivers\TplinkUDSMBus.sys [2012-09-21 102688]
R3 TplinkUDSTcpBus;TplinkUDSTcpBus; C:\WINDOWS\system32\drivers\TplinkUDSTcpBus.sys [2012-09-21 181024]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\WINDOWS\system32\drivers\tpm.sys [2013-08-22 159584]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunnel.sys [2013-08-22 154112]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\WINDOWS\System32\drivers\umbus.sys [2013-08-22 46080]
R3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Ovladač Microsoft UMPass; C:\WINDOWS\System32\drivers\umpass.sys [2013-08-22 11776]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\drivers\usbccgp.sys [2013-11-14 155480]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\WINDOWS\System32\drivers\usbehci.sys [2013-08-22 89952]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\drivers\usbhub.sys [2013-08-22 422240]
R3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\WINDOWS\System32\drivers\USBSTOR.SYS [2014-02-22 148824]
R3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\drivers\usbuhci.sys [2013-08-22 34816]
R3 VMnetAdapter;@oem31.inf,%VMnetAdapter.Service.DispName%;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [2014-04-14 20560]
R3 WdNisDrv;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-370; C:\WINDOWS\system32\Drivers\WdNisDrv.sys [2013-10-31 124760]
S0 3ware;3ware; C:\WINDOWS\System32\drivers\3ware.sys [2013-08-22 108896]
S0 ADP80XX;ADP80XX; C:\WINDOWS\System32\drivers\ADP80XX.SYS [2013-08-22 782176]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\WINDOWS\System32\drivers\agp440.sys [2013-08-22 62304]
S0 amdsata;amdsata; C:\WINDOWS\System32\drivers\amdsata.sys [2013-08-22 79200]
S0 amdsbs;amdsbs; C:\WINDOWS\System32\drivers\amdsbs.sys [2013-08-22 259424]
S0 amdxata;amdxata; C:\WINDOWS\System32\drivers\amdxata.sys [2013-08-22 25952]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Storport's Miniport Driver; C:\WINDOWS\System32\drivers\arcsas.sys [2013-08-22 114016]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\WINDOWS\System32\drivers\bxvbda.sys [2013-08-22 531296]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\WINDOWS\System32\drivers\evbda.sys [2013-08-22 3357024]
S0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\WINDOWS\System32\drivers\EhStorClass.sys [2013-08-22 82784]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [2013-08-22 114016]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\System32\drivers\gagp30kx.sys [2013-08-22 65888]
S0 HpSAMD;HpSAMD; C:\WINDOWS\System32\drivers\HpSAMD.sys [2013-08-22 64352]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\WINDOWS\System32\drivers\hwpolicy.sys [2013-08-22 24416]
S0 iaStorAV;@iastorav.inf,%iaStorAV.DeviceDesc%;Intel(R) SATA RAID Controller Windows; C:\WINDOWS\System32\drivers\iaStorAV.sys [2013-08-10 651248]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\WINDOWS\System32\drivers\iaStorV.sys [2013-08-22 412000]
S0 isapnp;isapnp; C:\WINDOWS\System32\drivers\isapnp.sys [2013-08-22 21856]
S0 LSI_SAS;LSI_SAS; C:\WINDOWS\System32\drivers\lsi_sas.sys [2013-08-22 109408]
S0 LSI_SAS2;LSI_SAS2; C:\WINDOWS\System32\drivers\lsi_sas2.sys [2013-08-22 93536]
S0 LSI_SAS3;LSI_SAS3; C:\WINDOWS\System32\drivers\lsi_sas3.sys [2013-08-22 81760]
S0 LSI_SSS;LSI_SSS; C:\WINDOWS\System32\drivers\lsi_sss.sys [2013-08-22 82784]
S0 megasas;megasas; C:\WINDOWS\System32\drivers\megasas.sys [2013-08-22 56672]
S0 megasr;megasr; C:\WINDOWS\System32\drivers\megasr.sys [2013-08-22 575840]
S0 mvumis;mvumis; C:\WINDOWS\System32\drivers\mvumis.sys [2013-08-22 63840]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\System32\drivers\nv_agp.sys [2013-08-22 124768]
S0 nvraid;nvraid; C:\WINDOWS\System32\drivers\nvraid.sys [2013-08-22 150368]
S0 nvstor;nvstor; C:\WINDOWS\System32\drivers\nvstor.sys [2013-08-22 168288]
S0 pciide;pciide; C:\WINDOWS\System32\drivers\pciide.sys [2013-08-22 14688]
S0 pcmcia;pcmcia; C:\WINDOWS\System32\drivers\pcmcia.sys [2013-08-22 114528]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\WINDOWS\System32\drivers\sbp2port.sys [2013-08-22 107872]
S0 SiSRaid2;SiSRaid2; C:\WINDOWS\System32\drivers\SiSRaid2.sys [2013-08-22 44896]
S0 SiSRaid4;SiSRaid4; C:\WINDOWS\System32\drivers\sisraid4.sys [2013-08-22 81760]
S0 stexstor;stexstor; C:\WINDOWS\System32\drivers\stexstor.sys [2013-08-22 31072]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\WINDOWS\System32\drivers\storahci.sys [2013-08-22 107872]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\WINDOWS\system32\DRIVERS\vmstorfl.sys [2013-08-22 49984]
S0 stornvme;@stornvme.inf,%StorNVMe_ServiceDesc%;Microsoft Standard NVM Express Driver; C:\WINDOWS\System32\drivers\stornvme.sys [2013-11-14 57176]
S0 storvsc;storvsc; C:\WINDOWS\System32\drivers\storvsc.sys [2013-08-22 45888]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Filtr Microsoft AGPv3.5; C:\WINDOWS\System32\drivers\uagp35.sys [2013-08-22 64864]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\WINDOWS\System32\drivers\uliagpkx.sys [2013-08-22 65888]
S0 viaide;viaide; C:\WINDOWS\System32\drivers\viaide.sys [2013-08-22 19808]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\WINDOWS\System32\drivers\vmbus.sys [2013-08-22 97088]
S0 vsmraid;vsmraid; C:\WINDOWS\System32\drivers\vsmraid.sys [2013-08-22 168800]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage RAID Controller Windows Driver; C:\WINDOWS\System32\drivers\vstxraid.sys [2013-08-22 305504]
S0 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\WINDOWS\system32\drivers\WdBoot.sys [2013-10-31 35856]
S1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\WINDOWS\System32\drivers\cdrom.sys [2013-08-22 164352]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\WINDOWS\system32\drivers\dam.sys [2013-08-22 57696]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\WINDOWS\System32\drivers\1394ohci.sys [2013-08-22 231424]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\WINDOWS\System32\drivers\acpipagr.sys [2013-08-22 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\WINDOWS\System32\drivers\acpipmi.sys [2013-08-22 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\WINDOWS\System32\drivers\acpitime.sys [2013-08-22 10752]
S3 AiCharger;AiCharger; C:\WINDOWS\SysWow64\drivers\AiCharger.sys [2012-03-22 14848]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\WINDOWS\System32\drivers\amdk8.sys [2013-08-22 95744]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\WINDOWS\System32\drivers\amdppm.sys [2013-08-22 98816]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\WINDOWS\system32\drivers\appid.sys [2013-11-14 83456]
S3 bcmfn2;@bcmfn2.inf,%bcmfn2.SVCDESC%;bcmfn2 Service; C:\WINDOWS\System32\drivers\bcmfn2.sys [2013-08-13 17624]
S3 bthav;Bluetooth AV Profile; C:\WINDOWS\system32\drivers\bthav.sys [2008-07-10 40448]
S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\WINDOWS\System32\drivers\BthAvrcpTg.sys [2013-08-22 36992]
S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\WINDOWS\System32\drivers\bthhfenum.sys [2013-08-22 57856]
S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\WINDOWS\System32\drivers\BthHFHid.sys [2013-08-22 30720]
S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\WINDOWS\System32\drivers\bthmodem.sys [2013-08-22 63488]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\WINDOWS\System32\drivers\circlass.sys [2013-08-22 44032]
S3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\System32\drivers\CmBatt.sys [2013-08-22 25472]
S3 dmvsc;dmvsc; C:\WINDOWS\System32\drivers\dmvsc.sys [2013-08-22 29696]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers; C:\WINDOWS\system32\drivers\drmkaud.sys [2013-08-22 14560]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-03-20 21712]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\WINDOWS\System32\drivers\errdev.sys [2013-08-22 10240]
S3 exfat;exFAT File System Driver; C:\WINDOWS\system32\drivers\exfat.sys [2013-08-22 200704]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\WINDOWS\System32\drivers\fdc.sys [2013-08-22 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\WINDOWS\system32\drivers\filetrace.sys [2013-08-22 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\WINDOWS\System32\drivers\flpydisk.sys [2013-08-22 25088]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\WINDOWS\System32\drivers\FsDepends.sys [2013-08-22 56672]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\WINDOWS\System32\drivers\fxppm.sys [2013-08-22 27136]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V – Čítač generací; C:\WINDOWS\System32\drivers\vmgencounter.sys [2013-08-22 11264]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\WINDOWS\System32\Drivers\msgpioclx.sys [2014-02-22 146776]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\WINDOWS\System32\drivers\HidBatt.sys [2013-08-22 26624]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\WINDOWS\System32\drivers\hidbth.sys [2013-08-22 96768]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\WINDOWS\System32\drivers\hidi2c.sys [2013-08-22 41472]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\WINDOWS\System32\drivers\hidir.sys [2013-08-22 45568]
S3 hyperkbd;hyperkbd; C:\WINDOWS\System32\drivers\hyperkbd.sys [2013-08-22 13824]
S3 HyperVideo;HyperVideo; C:\WINDOWS\system32\DRIVERS\HyperVideo.sys [2013-08-22 22016]
S3 i8042prt;@keyboard.inf,%i8042prt.SvcDesc%;Ovladač portu klávesnice i8042 a myši PS/2; C:\WINDOWS\System32\drivers\i8042prt.sys [2013-08-22 107520]
S3 iaLPSSi_GPIO;@ialpssi_gpio.inf,%iaLPSSi_GPIO.SVCDESC%;Intel(R) Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [2013-07-30 24568]
S3 iaLPSSi_I2C;@ialpssi_i2c.inf,%iaLPSSi_I2C.SVCDESC%;Intel(R) Serial IO I2C Controller Driver; C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [2013-07-25 99320]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [2013-08-22 84992]
S3 IPMIDRV;IPMIDRV; C:\WINDOWS\System32\drivers\IPMIDrv.sys [2014-03-06 79360]
S3 IPNAT;IP Network Address Translator; C:\WINDOWS\System32\drivers\ipnat.sys [2013-11-27 142848]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\WINDOWS\system32\drivers\irenum.sys [2013-08-22 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\WINDOWS\System32\drivers\msiscsi.sys [2013-08-22 274784]
S3 kbldfltr;kbldfltr; C:\WINDOWS\system32\drivers\kbldfltr.sys [2013-11-14 22272]
S3 Modem;Modem; C:\WINDOWS\system32\drivers\modem.sys [2013-08-22 40960]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\WINDOWS\system32\drivers\mrxdav.sys [2014-03-06 140288]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\WINDOWS\system32\DRIVERS\bridge.sys [2013-08-22 115712]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;Common Driver for Buttons, DockMode and Laptop/Slate Indicator; C:\WINDOWS\System32\drivers\msgpiowin32.sys [2013-08-22 41824]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\WINDOWS\System32\drivers\mshidkmdf.sys [2013-08-22 8192]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\WINDOWS\System32\drivers\mshidumdf.sys [2013-08-22 9728]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Server proxy služby datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSKSSRV.sys [2013-08-22 10624]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Server proxy hodin datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSPCLOCK.sys [2013-08-22 7040]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Server proxy správce kvality datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSPQM.sys [2013-08-22 6784]
S3 MsRPC;MsRPC; C:\WINDOWS\system32\drivers\MsRPC.sys [2013-08-22 366432]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2013-08-22 7936]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\WINDOWS\System32\drivers\MTConfig.sys [2013-08-22 13312]
S3 mvusbews;@oem12.inf,%mvusbews.SvcDesc%;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2012-12-24 20480]
S3 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\WINDOWS\system32\DRIVERS\nwifi.sys [2014-03-06 443392]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\WINDOWS\system32\DRIVERS\ndiscap.sys [2013-08-22 43008]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys [2013-08-22 124928]
S3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\WINDOWS\system32\DRIVERS\ndistapi.sys [2013-08-22 24576]
S3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\ndisuio.sys [2013-08-22 60416]
S3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\WINDOWS\system32\DRIVERS\ndiswan.sys [2013-08-22 220672]
S3 NdisWanLegacy;@%systemroot%\system32\rascfg.dll,-32014; C:\WINDOWS\system32\DRIVERS\ndiswan.sys [2013-08-22 220672]
S3 NDProxy;NDIS Proxy; C:\WINDOWS\system32\drivers\NDProxy.sys [2013-08-22 72192]
S3 Netaapl;@oem9.inf,%Netaapl.Service.DispName%;Apple Mobile Device Ethernet Service; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [2013-07-25 23040]
S3 netvsc;netvsc; C:\WINDOWS\system32\DRIVERS\netvsc63.sys [2013-08-22 87040]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\WINDOWS\System32\drivers\parport.sys [2013-08-22 94208]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\WINDOWS\System32\drivers\processr.sys [2013-08-22 92160]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\WINDOWS\system32\drivers\qwavedrv.sys [2013-08-22 47104]
S3 RasAcd;Remote Access Auto Connection Driver; C:\WINDOWS\System32\DRIVERS\rasacd.sys [2013-08-22 17408]
S3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\WINDOWS\system32\DRIVERS\raspppoe.sys [2013-08-22 84992]
S3 ReFS;ReFS; C:\WINDOWS\system32\drivers\ReFS.sys [2014-02-22 924504]
S3 s3cap;s3cap; C:\WINDOWS\System32\drivers\vms3cap.sys [2013-08-22 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\WINDOWS\System32\DRIVERS\scfilter.sys [2013-08-22 40960]
S3 sdbus;sdbus; C:\WINDOWS\System32\drivers\sdbus.sys [2014-02-22 236888]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\WINDOWS\System32\drivers\sdstor.sys [2014-02-22 79192]
S3 SerCx;Serial UART Support Library; C:\WINDOWS\system32\drivers\SerCx.sys [2013-08-22 69472]
S3 SerCx2;Serial UART Support Library; C:\WINDOWS\system32\drivers\SerCx2.sys [2014-01-18 146776]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\WINDOWS\System32\drivers\serenum.sys [2013-08-22 23040]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\WINDOWS\System32\drivers\serial.sys [2013-08-22 83456]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\WINDOWS\System32\drivers\sermouse.sys [2013-08-22 26112]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\WINDOWS\System32\drivers\sfloppy.sys [2013-08-22 17408]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\WINDOWS\system32\drivers\SpbCx.sys [2013-08-22 72032]
S3 storvsp;storvsp; C:\WINDOWS\System32\drivers\storvsp.sys [2013-11-14 68608]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2013-04-18 16152]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\WINDOWS\system32\DRIVERS\tcpip.sys [2014-03-04 2519384]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2013-10-17 35112]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\WINDOWS\System32\drivers\terminpt.sys [2013-11-14 37216]
S3 TsUsbFlt;TsUsbFlt; C:\WINDOWS\system32\drivers\tsusbflt.sys [2013-08-22 56320]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\WINDOWS\System32\drivers\TsUsbGD.sys [2013-08-22 29696]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\WINDOWS\System32\drivers\uaspstor.sys [2013-08-22 74080]
S3 UCX01000;USB Controller Extension; C:\WINDOWS\System32\drivers\ucx01000.sys [2014-02-22 189784]
S3 UEFI;@uefi.inf,%UEFI.SvcDesc%;Microsoft UEFI Driver; C:\WINDOWS\System32\drivers\UEFI.sys [2013-08-22 26976]
S3 USBAAPL64;@oem3.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\WINDOWS\System32\drivers\usbcir.sys [2013-08-22 98304]
S3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\WINDOWS\System32\drivers\UsbHub3.sys [2014-03-08 467800]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\System32\drivers\usbohci.sys [2013-08-22 30208]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\WINDOWS\System32\drivers\usbprint.sys [2013-08-22 26112]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\WINDOWS\System32\drivers\USBXHCI.SYS [2014-02-22 325464]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\WINDOWS\system32\drivers\VerifierExt.sys [2013-11-14 175960]
S3 vhdmp;vhdmp; C:\WINDOWS\System32\drivers\vhdmp.sys [2014-01-29 551256]
S3 Vid;Vid; C:\WINDOWS\System32\drivers\Vid.sys [2013-11-14 220672]
S3 VMBusHID;VMBusHID; C:\WINDOWS\System32\drivers\VMBusHID.sys [2013-08-22 21760]
S3 vmbusr;@%SystemRoot%\system32\drivers\vmbusr.sys,-1001; C:\WINDOWS\System32\drivers\vmbusr.sys [2013-11-14 129536]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\WINDOWS\System32\drivers\vpci.sys [2013-08-22 69472]
S3 vpcivsp;@wvpcivsp.inf,%vpcivsp.SVCDESC%;Microsoft Hyper-V PCI Server; C:\WINDOWS\System32\drivers\vpcivsp.sys [2013-11-14 65536]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\WINDOWS\System32\drivers\vwifibus.sys [2013-08-22 24576]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\WINDOWS\System32\drivers\wacompen.sys [2013-08-22 26752]
S4 cdfs;CD/DVD File System Reader; C:\WINDOWS\system32\DRIVERS\cdfs.sys [2013-08-22 88576]
S4 udfs;udfs; C:\WINDOWS\system32\DRIVERS\udfs.sys [2013-08-22 316928]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2012-04-27 1191648]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AirPrint;AirPrint; C:\Program Files (x86)\AirPrint\airprint.exe [2013-03-28 234784]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-03-30 2211000]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 d0e87c27;SW-Sustainer; C:\WINDOWS\syswow64\rundll32.exe [2013-08-22 49664]
R2 DcomLaunch;@combase.dll,-5012; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 EventSystem;@comres.dll,-2450; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 gpsvc;@gpapi.dll,-112; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-10-15 136192]
R2 HPSIService;HP SI Service; C:\WINDOWS\system32\HPSIsvc.exe [2012-11-08 126856]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 RalinkRegistryWriter;RalinkRegistryWriter; C:\Program Files (x86)\Ralink\Common\RaRegistry.exe [2012-07-04 372736]
R2 RalinkRegistryWriter64;RalinkRegistryWriter64; C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe [2012-07-04 447488]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 RpcSs;@combase.dll,-5010; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\WINDOWS\System32\spoolsv.exe [2013-08-22 798208]
R2 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2014-04-14 86744]
R2 VMnetDHCP;VMware DHCP Service; C:\WINDOWS\syswow64\vmnetdhcp.exe [2014-04-14 359128]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2014-02-27 906432]
R2 VMware NAT Service;VMware NAT Service; C:\WINDOWS\syswow64\vmnat.exe [2014-04-14 437976]
R2 VMwareHostd;VMware Workstation Server; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [2014-04-14 14407384]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 Browser;@%systemroot%\system32\browser.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 NcbService;@%SystemRoot%\system32\ncbservice.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
R3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
R3 WdNisSvc;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320; C:\Program Files\Windows Defender\NisSrv.exe [2013-10-31 348392]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 116648]
S2 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
S2 RaMediaServer;Ralink UPnP Media Server; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [2012-07-06 1863680]
S2 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\WINDOWS\system32\sppsvc.exe [2013-12-21 6353960]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\WINDOWS\System32\alg.exe [2013-08-22 92672]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AppMgmt;@appmgmts.dll,-3250; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AppReadiness;@%SystemRoot%\System32\AppReadiness.dll,-1000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 AppXSvc;@%SystemRoot%\system32\appxdeploymentserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 COMSysApp;@comres.dll,-947; C:\WINDOWS\system32\dllhost.exe [2013-08-22 19296]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\WINDOWS\System32\lsass.exe [2013-08-22 45008]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\WINDOWS\ehome\ehRecvr.exe [2013-11-14 697856]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\WINDOWS\ehome\ehsched.exe [2013-11-14 176128]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\WINDOWS\system32\fxssvc.exe [2013-08-22 655360]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 116648]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\WINDOWS\system32\IEEtwCollector.exe [2014-04-10 111616]
S3 KeyIso;@keyiso.dll,-100; C:\WINDOWS\system32\lsass.exe [2013-08-22 45008]
S3 KtmRm;@comres.dll,-2946; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 lfsvc;@%SystemRoot%\System32\GeofenceMonitorService.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 MSDTC;@comres.dll,-2797; C:\WINDOWS\System32\msdtc.exe [2013-08-22 142848]
S3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\WINDOWS\system32\msiexec.exe [2013-08-22 62464]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-10-03 150600]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 178760]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\WINDOWS\SysWow64\perfhost.exe [2013-08-22 21504]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 PrintNotify;@C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\WINDOWS\system32\locator.exe [2013-08-22 10240]
S3 ScDeviceEnum;@%SystemRoot%\System32\ScDeviceEnum.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 smphost;@%SystemRoot%\System32\smphost.dll,-102; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\WINDOWS\System32\snmptrap.exe [2013-08-22 14848]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\WINDOWS\servicing\TrustedInstaller.exe [2014-02-22 99840]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\WINDOWS\system32\UI0Detect.exe [2013-08-22 40960]
S3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\WINDOWS\System32\vds.exe [2014-02-22 1283584]
S3 vmicguestinterface;@%systemroot%\system32\vmicres.dll,-801; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\WINDOWS\system32\vssvc.exe [2014-02-22 1436160]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\WINDOWS\system32\wbengine.exe [2014-02-22 1543680]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WebClient;@%systemroot%\system32\webclnt.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 WEPHOSTSVC;@%systemroot%\system32\wephostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 MsKeyboardFilter;@%SystemRoot%\system32\KeyboardFilterSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 NeroMediaHomeService.4;Nero MediaHome 4 Service; C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe [2012-12-20 518632]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-08-10 139856]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\WINDOWS\System32\svchost.exe [2013-08-22 37768]
S4 RemoteRegistry;@regsvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\WINDOWS\system32\svchost.exe [2013-08-22 37768]
-----------------EOF-----------------
log IV
info.txt logfile of random's system information tool 1.09 2014-05-09 12:38:10
======Uninstall list======
-->C:\PROGRA~3\INSTAL~2\{F6087~1\Setup.exe /remove /q0
-->C:\PROGRA~3\InstallMate\{613E5003-BF01-49A3-AB48-F723BADD72F5}\Setup.exe /remove /q0
7-Zip 9.20 (x64 edition)-->MsiExec.exe /I{23170F69-40C1-2702-0920-000001000000}
Acronis True Image WD Edition-->MsiExec.exe /X{9B683A28-2172-4CF1-B85D-41375E80652A}
Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{FE23D063-934D-4829-A0D8-00634CE79B4A}
Adobe Audition CS6-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="2.0" --mode="Uninstall" --mediaSignature="{30FD541D-3C9D-41C4-B240-A994EE4E0231}"
Adobe Help Manager-->msiexec /qb /x {AF37176A-78CA-545B-34EF-8B6A21514DD1}
Adobe Help Manager-->MsiExec.exe /I{AF37176A-78CA-545B-34EF-8B6A21514DD1}
Adobe Reader XI (11.0.06) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
AMD Accelerated Video Transcoding-->MsiExec.exe /X{6809A67A-D099-48EA-9126-8567130CF377}
AMD Catalyst Install Manager-->msiexec /q/x{202EA2C4-DF99-1AA8-5F8B-2683EC43391F} REBOOT=ReallySuppress
AMD Drag and Drop Transcoding-->MsiExec.exe /X{12434519-5359-85DD-F638-D6BA24A9531A}
AMD Media Foundation Decoders-->MsiExec.exe /X{65312278-952C-D46E-8297-4CAB93F5B2DF}
Apple Application Support-->MsiExec.exe /I{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}
Apple Mobile Device Support-->MsiExec.exe /I{787136D2-F0F8-4625-AA3F-72D7795AC842}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
bl-->MsiExec.exe /I{2A075BB4-E976-4278-BF3F-E5C6945D84C0}
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
BS.Player FREE-->"C:\Program Files (x86)\Webteh\BSPlayer\uninstall.exe"
Catalyst Control Center - Branding-->MsiExec.exe /I{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files (x86)\CDBurnerXP\unins000.exe"
Convert VOB to AVI-->"C:\Program Files (x86)\Convert VOB to AVI\unins000.exe"
Data Lifeguard Diagnostic for Windows 1.24-->"C:\Program Files (x86)\Western Digital Corporation\Data Lifeguard Diagnostic for Windows\unins000.exe"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
DivX Setup-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall
Flvto Youtube Downloader-->C:\Program Files (x86)\Flvto Youtube Downloader\UninstallFlvtoYoutubeDownloader.exe
Google Drive-->MsiExec.exe /X{418BAAD1-754D-48B4-B078-46EF4F25AF42}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HandBrake 0.9.9.1-->C:\Program Files\Handbrake\uninst.exe
HD Tune 2.55-->"C:\Program Files (x86)\HD Tune\unins000.exe"
HP LaserJet Professional M1130-M1210 MFP Series-->C:\Program Files\HP\HP LaserJet M1210 MFP Series\Uninstall.exe
HPSSupply-->MsiExec.exe /X{7902E313-FF0F-4493-ACB1-A8147B78DCD0}
HydraVision-->MsiExec.exe /X{3362063A-DBFA-5A33-8853-507420402FA5}
Intel(R) C++ Redistributables for Windows* on Intel(R) 64-->MsiExec.exe /X{D2437C5C-2D8C-40D2-8059-689AD7239FA3}
iTunes-->MsiExec.exe /I{B8BA155B-1E75-405F-9CB4-8A99615D09DC}
LG Cloud verze 1.008-->"C:\Program Files\LG Cloud\unins000.exe"
MediaCoder iPhone Edition x64 0.8.27-->C:\Program Files\MediaCoder iPhone Edition x64\uninst.exe
MediaCoder x64 0.8.27.5570-->C:\Program Files\MediaCoder\uninst.exe
Microsoft Access MUI (Czech) 2013-->MsiExec.exe /X{90150000-0015-0405-1000-0000000FF1CE}
Microsoft DCF MUI (Czech) 2013-->MsiExec.exe /X{90150000-0090-0405-1000-0000000FF1CE}
Microsoft Excel MUI (Czech) 2013-->MsiExec.exe /X{90150000-0016-0405-1000-0000000FF1CE}
Microsoft Groove MUI (Czech) 2013-->MsiExec.exe /X{90150000-00BA-0405-1000-0000000FF1CE}
Microsoft InfoPath MUI (Czech) 2013-->MsiExec.exe /X{90150000-0044-0405-1000-0000000FF1CE}
Microsoft Lync MUI (Czech) 2013-->MsiExec.exe /X{90150000-012B-0405-1000-0000000FF1CE}
Microsoft Office 2013 pro podnikatele - cs-cz-->"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" scenario=install baseurl="C:\Program Files\Microsoft Office 15" platform=x86 version=15.0.4605.1003 culture=cs-cz productstoremove=HomeBusinessRetail_cs-cz_x-none
Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-1000-0000000FF1CE}
Microsoft Office Language Pack 2013 - Czech/čeština-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall OMUI.CS-CZ /dll OSETUP.DLL
Microsoft Office O MUI (Czech) 2013-->MsiExec.exe /X{90150000-0100-0405-1000-0000000FF1CE}
Microsoft Office OSM MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E1-0405-1000-0000000FF1CE}
Microsoft Office OSM UX MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E2-0405-1000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2013-->MsiExec.exe /X{90150000-002C-0405-1000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-1000-0000000FF1CE}
Microsoft Office Shared 32-bit MUI (Czech) 2013-->MsiExec.exe /X{90150000-00C1-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2013-->MsiExec.exe /X{90150000-006E-0405-1000-0000000FF1CE}
Microsoft OneNote MUI (Czech) 2013-->MsiExec.exe /X{90150000-00A1-0405-1000-0000000FF1CE}
Microsoft Outlook MUI (Czech) 2013-->MsiExec.exe /X{90150000-001A-0405-1000-0000000FF1CE}
Microsoft PowerPoint MUI (Czech) 2013-->MsiExec.exe /X{90150000-0018-0405-1000-0000000FF1CE}
Microsoft Publisher MUI (Czech) 2013-->MsiExec.exe /X{90150000-0019-0405-1000-0000000FF1CE}
Microsoft SharePoint Designer MUI (Czech) 2013-->MsiExec.exe /X{90150000-0017-0405-1000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual Studio Tools for Applications 2012 Finalizer-->MsiExec.exe /I{5950473A-825B-3019-AF86-55F2F9A95FCB}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Module linguistique Français-->MsiExec.exe /X{BA14C6F7-A633-3E88-831B-FCC197A5A17D}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - DEU-Sprachpaket-->MsiExec.exe /X{36B98E65-CA52-348C-9ED7-77B926A16C2D}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Language Pack ITA-->MsiExec.exe /X{73A36613-1F8F-3D94-B28A-4CC0E3CAECB5}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Paquete de idioma ESN-->MsiExec.exe /X{DDDF762A-2D1D-36A3-9B70-70BD62B4EDCF}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - 한국어 언어 팩-->MsiExec.exe /X{2F884A17-E051-3DB7-B093-6274C98740F6}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - 日本語 Language Pack-->MsiExec.exe /X{73A64813-E631-3807-8E78-BA679EDA09A8}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support-->MsiExec.exe /X{5707EC26-AA9F-32C6-B7C1-347A3482CEC0}
Microsoft Visual Studio Tools for Applications 2012 x64 主控支援 - 繁體中文語言套件-->MsiExec.exe /X{FB501A6E-CA6D-36DA-8860-17F0E6D89155}
Microsoft Visual Studio Tools for Applications 2012 x64 托管支持 - 简体中文语言包-->MsiExec.exe /X{CD56C9B9-FB98-372B-8BC7-FDA312CD2511}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - DEU-Sprachpaket-->MsiExec.exe /X{CAAC553D-EE02-32D2-9F7E-FBC5C22E4C08}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Language Pack ITA-->MsiExec.exe /X{B8FD8F53-7E58-3DE5-A8FC-CB2B5CCF38CE}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Module linguistique Français-->MsiExec.exe /X{3371699A-C1EF-3AC3-B094-D338191FA6E9}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Paquete de idioma ESN-->MsiExec.exe /X{A3EB1DE3-9D3F-34C2-BDE6-5A8A4B98CC37}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 한국어 언어 팩-->MsiExec.exe /X{955E1388-E1F1-320A-A018-24616ED60F95}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 日本語 Language Pack-->MsiExec.exe /X{859C7535-6862-3867-B97E-816795E8AB65}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support-->MsiExec.exe /X{CF06B8C4-F6FC-3A4B-ADD0-04A1CAC3DD86}
Microsoft Visual Studio Tools for Applications 2012 x86 主控支援 - 繁體中文語言套件-->MsiExec.exe /X{0FE6DE07-8CBA-3F73-86B4-51B91E506D24}
Microsoft Visual Studio Tools for Applications 2012 x86 托管支持 - 简体中文语言包-->MsiExec.exe /X{7259BDDA-D888-309D-ADE1-84AA0CB24FE9}
Microsoft Visual Studio Tools for Applications 2012-->"C:\ProgramData\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe" /uninstall
Microsoft Word MUI (Czech) 2013-->MsiExec.exe /X{90150000-001B-0405-1000-0000000FF1CE}
Microsoft X MUI (Czech) 2013-->MsiExec.exe /X{90150000-0101-0405-1000-0000000FF1CE}
Microsoft_VC100_CRT_SP1_x64-->MsiExec.exe /I{680EDA59-9266-44B4-949E-0C24F65DFF82}
Microsoft_VC100_CRT_SP1_x86-->MsiExec.exe /I{E3B64CC5-C011-40C0-92BC-7316CD5E5688}
Mp3tag v2.57-->C:\Program Files (x86)\Mp3tag\Mp3tagUninstall.EXE
MSVC80_x64_v2-->MsiExec.exe /I{4D668D4F-FAA2-4726-834C-31F4614F312E}
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština-->MsiExec.exe /X{90150000-001F-0405-1000-0000000FF1CE}
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina-->MsiExec.exe /X{90150000-001F-041B-1000-0000000FF1CE}
Nero ControlCenter Help (CHM)-->MsiExec.exe /X{CDFE8F95-F80F-4115-9C3F-0E1FD8F9F58C}
Nero ControlCenter-->MsiExec.exe /X{ABC88553-8770-4B97-B43E-5A90647A5B63}
Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero ControlCenter-->MsiExec.exe /X{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}
Nero Core Components-->MsiExec.exe /X{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero MediaHome 4 Essentials-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="2M05-K084-MH3C-8Z0X-4XPU-X82L-4C97-M487-3M3C-4UX4-7T73-4W24-8H6Z"
Nero MediaHome 4 Help-->MsiExec.exe /X{69FC3B9A-4149-43DB-A557-6ED0C8D8BA44}
Nero MediaHome 4-->MsiExec.exe /X{99EF387E-633E-4CFB-BFA3-AB961B685DDF}
Nero Online Upgrade-->MsiExec.exe /X{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
Nero WaveEditor Help (CHM)-->MsiExec.exe /X{1D30EA2E-5341-493E-8D71-0EED788B6CD9}
Nero WaveEditor-->MsiExec.exe /I{831D3D7B-169D-47F3-9117-D74934BF71BF}
Nero WaveEditor-->MsiExec.exe /X{76335315-16A0-4DBB-B01C-5FDC6A5CB8A3}
Office 15 Click-to-Run Extensibility Component-->MsiExec.exe /X{90150000-008C-0000-0000-0000000FF1CE}
Office 15 Click-to-Run Extensibility Component-->MsiExec.exe /X{90150000-008C-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Licensing Component-->MsiExec.exe /I{90150000-007E-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Licensing Component-->MsiExec.exe /I{90150000-008F-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Localization Component-->MsiExec.exe /X{90150000-008C-0405-0000-0000000FF1CE}
Office 15 Click-to-Run Localization Component-->MsiExec.exe /X{90150000-008C-0405-1000-0000000FF1CE}
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB-->MsiExec.exe /X{E237254B-36A1-3D27-815E-B37C13BE0796}
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB-->MsiExec.exe /X{03077B58-6ACF-32CA-B42A-EAA458C295A1}
ph-->MsiExec.exe /I{185F9795-9663-4F13-9EF9-307A282ADB5A}
PlayReady PC Runtime amd64-->MsiExec.exe /X{2E0C1D31-8FEC-411E-97FB-6E56BD429A98}
QuickTime 7-->MsiExec.exe /I{111EE7DF-FC45-40C7-98A7-753AC46B12FB}
Ralink RT2870 Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}\setup.exe -runfromtemp -l0x0005 -removeonly
Scan To-->MsiExec.exe /I{E8A34AC8-0137-4515-A94B-0A0946DDC251}
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0017-0405-1000-0000000FF1CE}" "{85EB11C5-7793-4386-8F93-3D15494EC269}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-1000-0000000FF1CE}" "{1E8252A7-D489-4BB6-9694-93799FFD33ED}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{DABB9E2A-F054-4F97-9EB2-6992316C6EC7}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{835E4BED-E265-4103-AE14-0B4C70CF3FE8}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-1000-0000000FF1CE}" "{4601BD00-BC9B-4CA2-940C-2552782C7347}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0405-1000-0000000FF1CE}" "{EC915383-0457-4D83-BE7A-009D7841E9C5}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{3F685A71-DF4A-4AC0-A110-0FA0B7FFD86C}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{6E88843F-58F2-45EB-8C4A-0DDFE45366E1}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0100-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0101-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Speccy-->"C:\Program Files\Speccy\uninst.exe"
Správce stahování z webu Microsoft-->MsiExec.exe /X{654977DB-0001-0002-0001-EABD228DDE8B}
SW-Booster-->"c:\programdata\appready software\sw-booster\sw-booster.exe" /uninstall
SW-Sustainer 1.80-->"C:\WINDOWS\system32\RUNDLL32.EXE" "C:\PROGRA~2\SW-Booster\Assistant.dll",_uninstall /un
System Requirements Lab for Intel-->MsiExec.exe /I{53C63F43-B827-42D9-8886-4698D91EA33B}
tools-freebsd-->MsiExec.exe /X{003BFBBD-6C67-419E-A24D-0DCAFC3A5249}
tools-linux-->MsiExec.exe /X{D102611A-6466-4101-A51D-51069303AC65}
tools-netware-->MsiExec.exe /X{197597A7-AD33-4898-9D8E-73066818B464}
tools-solaris-->MsiExec.exe /X{AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4}
tools-windows-->MsiExec.exe /X{FFD9383C-01D5-4897-A954-43AF599AED30}
tools-winPre2k-->MsiExec.exe /X{AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D}
Total Commander 64-bit (Remove or Repair)-->c:\totalcmd\tcunin64.exe
TP-LINK USB Printer Controller-->MsiExec.exe /X{3EC900B5-28EE-4472-A9FF-B11A879EC838}
Ulož.to File Manager verze 1.6-->"C:\Program Files (x86)\Ulozto File Manager\unins000.exe"
Unlocker 1.9.1-->C:\Program Files (x86)\Unlocker\uninst.exe
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{B122F645-B955-43E5-BFF7-210DE47D9422}" "1029" "0"
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{D064ADB5-9DB8-419C-9802-DC905D740E71}" "1029" "0"
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{D97AACA3-9AEA-43FF-8CBA-93BED0443FC2}" "1029" "0"
Update for Microsoft Office 2013 (KB2825631) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{A54917FC-2C84-40F2-9525-7549BE08DE40}" "1029" "0"
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{50F6EF67-B93C-4B7A-A2EB-E179E3436C69}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}" "1029" "0"
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{9367C385-2EF9-4BE3-8351-7D2AB0798A57}" "1029" "0"
Update for Microsoft Outlook 2013 (KB2863911) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{3102DD4D-D5F6-4FFC-8F8B-B939936C5948}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB2837627) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{FE06DACB-AE2C-4DB7-B95D-97A320E59F45}" "1029" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1029" "0"
VC80CRTRedist - 8.0.50727.6195-->MsiExec.exe /I{933B4015-4618-4716-A828-5289FC03165F}
VLC media player 2.1.3-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
VMware Workstation-->"C:\ProgramData\VMware\VMware Workstation\Uninstaller\\uninstall.exe" -x -S "C:\ProgramData\VMware\VMware Workstation\Uninstaller\"
VMware Workstation-->MsiExec.exe /I{0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}
Win2PDF 7-->"C:\Windows\SysWOW64\spool\drivers\x64\3\Win2PDF\unins000.exe"
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
YoutubeAdblocker-->"C:\ProgramData\YoutubeAdblocker\vE.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS-->MsiExec.exe /X{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS-->MsiExec.exe /X{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}
======Hosts File======
127.0.0.1 08sr.combineads.info # hosts anti-adware / pups
127.0.0.1 08srvr.combineads.info # hosts anti-adware / pups
127.0.0.1 12srvr.combineads.info # hosts anti-adware / pups
127.0.0.1 2010-fr.com # hosts anti-adware / pups
127.0.0.1 2012-new.biz # hosts anti-adware / pups
127.0.0.1 212link.com # hosts anti-adware / pups
127.0.0.1 2319825.ourtoolbar.com # hosts anti-adware / pups
127.0.0.1 24h00business.com # hosts anti-adware / pups
127.0.0.1 a.adorika.net # hosts anti-adware / pups
127.0.0.1 a.ad-sys.com # hosts anti-adware / pups
======System event log======
Computer Name: windows-uj49s6b
Event Code: 13
Message: Operační systém se vypíná v systémovém čase 2012-07-26T07:29:19.110493400Z.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20120726072919.110493-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 109
Message: Správce napájení jádra inicioval přechod do režimu vypnutí.
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Power
Time Written: 20120726072918.969937-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6009
Message: Microsoft (R) Windows (R) 6.02. 9200 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z WINDOWS-UJ49S6B na WIN-USAC6I84RS7.
Record Number: 1
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
=====Application event log=====
Computer Name: prac
Event Code: 16384
Message: Restartování služby Ochrana softwaru bylo úspěšně naplánováno na 2113-05-05T18:28:29Z. Důvod: RulesEngine
Record Number: 20595
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182829.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1003
Message: Služba Windows Search byla spuštěna.
Record Number: 20594
Source Name: Microsoft-Windows-Search
Time Written: 20130529182800.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 902
Message: Služba Ochrana softwaru byla spuštěna.
6.2.9200.16384
Record Number: 20593
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182759.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1003
Message: Služba Ochrana softwaru dokončila kontrolu stavu licencování.
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
Stav licencování=
1: 7b65fea6-df35-4e65-aaa7-bdf1fef5b24f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 7e324006-b4e8-4d0d-b52a-44c59af7b03f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )]
3: a00018a3-f20f-4632-bf7c-8daa5351c914, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: d9ec2828-d29e-4d1c-8fa7-bfe2c4786003, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: ec67814b-30e6-4a50-bf7b-d55daf729d1e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
Record Number: 20592
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182759.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1066
Message: Inicializační stav pro objekty služby
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
Record Number: 20591
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182758.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\jvgasys.fon
ID popisovače: 0xb08
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174936
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.748064-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\h8514sys.fon
ID popisovače: 0xb14
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174935
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.734064-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.3.9600.16384_none_6fce425902968fa6\jvgafix.fon
ID popisovače: 0xad8
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174934
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.725063-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\hvgasys.fon
ID popisovače: 0x948
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174933
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.707062-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.3.9600.16384_none_6fce425902968fa6\hvgafix.fon
ID popisovače: 0xa4c
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174932
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.693061-000
Event Type: Úspěšný audit
User:
======Environment variables======
"FP_NO_HOST_CHECK"=NO
"USERNAME"=SYSTEM
"ComSpec"=%SystemRoot%\system32\cmd.exe
"TMP"=%SystemRoot%\TEMP
"OS"=Windows_NT
"windir"=%SystemRoot%
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"asl.log"=Destination=file
"Path"=%C_EM64T_REDIST11%bin\Intel64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\Common Files\Acronis\SnapAPI;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem\
"C_EM64T_REDIST11"=C:\Program Files (x86)\Common Files\Intel\Shared Files\cpp\
-----------------EOF-----------------
======Uninstall list======
-->C:\PROGRA~3\INSTAL~2\{F6087~1\Setup.exe /remove /q0
-->C:\PROGRA~3\InstallMate\{613E5003-BF01-49A3-AB48-F723BADD72F5}\Setup.exe /remove /q0
7-Zip 9.20 (x64 edition)-->MsiExec.exe /I{23170F69-40C1-2702-0920-000001000000}
Acronis True Image WD Edition-->MsiExec.exe /X{9B683A28-2172-4CF1-B85D-41375E80652A}
Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{FE23D063-934D-4829-A0D8-00634CE79B4A}
Adobe Audition CS6-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="2.0" --mode="Uninstall" --mediaSignature="{30FD541D-3C9D-41C4-B240-A994EE4E0231}"
Adobe Help Manager-->msiexec /qb /x {AF37176A-78CA-545B-34EF-8B6A21514DD1}
Adobe Help Manager-->MsiExec.exe /I{AF37176A-78CA-545B-34EF-8B6A21514DD1}
Adobe Reader XI (11.0.06) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
AMD Accelerated Video Transcoding-->MsiExec.exe /X{6809A67A-D099-48EA-9126-8567130CF377}
AMD Catalyst Install Manager-->msiexec /q/x{202EA2C4-DF99-1AA8-5F8B-2683EC43391F} REBOOT=ReallySuppress
AMD Drag and Drop Transcoding-->MsiExec.exe /X{12434519-5359-85DD-F638-D6BA24A9531A}
AMD Media Foundation Decoders-->MsiExec.exe /X{65312278-952C-D46E-8297-4CAB93F5B2DF}
Apple Application Support-->MsiExec.exe /I{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}
Apple Mobile Device Support-->MsiExec.exe /I{787136D2-F0F8-4625-AA3F-72D7795AC842}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
bl-->MsiExec.exe /I{2A075BB4-E976-4278-BF3F-E5C6945D84C0}
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
BS.Player FREE-->"C:\Program Files (x86)\Webteh\BSPlayer\uninstall.exe"
Catalyst Control Center - Branding-->MsiExec.exe /I{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files (x86)\CDBurnerXP\unins000.exe"
Convert VOB to AVI-->"C:\Program Files (x86)\Convert VOB to AVI\unins000.exe"
Data Lifeguard Diagnostic for Windows 1.24-->"C:\Program Files (x86)\Western Digital Corporation\Data Lifeguard Diagnostic for Windows\unins000.exe"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
DivX Setup-->C:\ProgramData\DivX\Setup\DivXSetup.exe /uninstall
Flvto Youtube Downloader-->C:\Program Files (x86)\Flvto Youtube Downloader\UninstallFlvtoYoutubeDownloader.exe
Google Drive-->MsiExec.exe /X{418BAAD1-754D-48B4-B078-46EF4F25AF42}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HandBrake 0.9.9.1-->C:\Program Files\Handbrake\uninst.exe
HD Tune 2.55-->"C:\Program Files (x86)\HD Tune\unins000.exe"
HP LaserJet Professional M1130-M1210 MFP Series-->C:\Program Files\HP\HP LaserJet M1210 MFP Series\Uninstall.exe
HPSSupply-->MsiExec.exe /X{7902E313-FF0F-4493-ACB1-A8147B78DCD0}
HydraVision-->MsiExec.exe /X{3362063A-DBFA-5A33-8853-507420402FA5}
Intel(R) C++ Redistributables for Windows* on Intel(R) 64-->MsiExec.exe /X{D2437C5C-2D8C-40D2-8059-689AD7239FA3}
iTunes-->MsiExec.exe /I{B8BA155B-1E75-405F-9CB4-8A99615D09DC}
LG Cloud verze 1.008-->"C:\Program Files\LG Cloud\unins000.exe"
MediaCoder iPhone Edition x64 0.8.27-->C:\Program Files\MediaCoder iPhone Edition x64\uninst.exe
MediaCoder x64 0.8.27.5570-->C:\Program Files\MediaCoder\uninst.exe
Microsoft Access MUI (Czech) 2013-->MsiExec.exe /X{90150000-0015-0405-1000-0000000FF1CE}
Microsoft DCF MUI (Czech) 2013-->MsiExec.exe /X{90150000-0090-0405-1000-0000000FF1CE}
Microsoft Excel MUI (Czech) 2013-->MsiExec.exe /X{90150000-0016-0405-1000-0000000FF1CE}
Microsoft Groove MUI (Czech) 2013-->MsiExec.exe /X{90150000-00BA-0405-1000-0000000FF1CE}
Microsoft InfoPath MUI (Czech) 2013-->MsiExec.exe /X{90150000-0044-0405-1000-0000000FF1CE}
Microsoft Lync MUI (Czech) 2013-->MsiExec.exe /X{90150000-012B-0405-1000-0000000FF1CE}
Microsoft Office 2013 pro podnikatele - cs-cz-->"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" scenario=install baseurl="C:\Program Files\Microsoft Office 15" platform=x86 version=15.0.4605.1003 culture=cs-cz productstoremove=HomeBusinessRetail_cs-cz_x-none
Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-1000-0000000FF1CE}
Microsoft Office Language Pack 2013 - Czech/čeština-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall OMUI.CS-CZ /dll OSETUP.DLL
Microsoft Office O MUI (Czech) 2013-->MsiExec.exe /X{90150000-0100-0405-1000-0000000FF1CE}
Microsoft Office OSM MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E1-0405-1000-0000000FF1CE}
Microsoft Office OSM UX MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E2-0405-1000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2013-->MsiExec.exe /X{90150000-002C-0405-1000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-1000-0000000FF1CE}
Microsoft Office Shared 32-bit MUI (Czech) 2013-->MsiExec.exe /X{90150000-00C1-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2013-->MsiExec.exe /X{90150000-006E-0405-1000-0000000FF1CE}
Microsoft OneNote MUI (Czech) 2013-->MsiExec.exe /X{90150000-00A1-0405-1000-0000000FF1CE}
Microsoft Outlook MUI (Czech) 2013-->MsiExec.exe /X{90150000-001A-0405-1000-0000000FF1CE}
Microsoft PowerPoint MUI (Czech) 2013-->MsiExec.exe /X{90150000-0018-0405-1000-0000000FF1CE}
Microsoft Publisher MUI (Czech) 2013-->MsiExec.exe /X{90150000-0019-0405-1000-0000000FF1CE}
Microsoft SharePoint Designer MUI (Czech) 2013-->MsiExec.exe /X{90150000-0017-0405-1000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual Studio Tools for Applications 2012 Finalizer-->MsiExec.exe /I{5950473A-825B-3019-AF86-55F2F9A95FCB}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Module linguistique Français-->MsiExec.exe /X{BA14C6F7-A633-3E88-831B-FCC197A5A17D}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - DEU-Sprachpaket-->MsiExec.exe /X{36B98E65-CA52-348C-9ED7-77B926A16C2D}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Language Pack ITA-->MsiExec.exe /X{73A36613-1F8F-3D94-B28A-4CC0E3CAECB5}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - Paquete de idioma ESN-->MsiExec.exe /X{DDDF762A-2D1D-36A3-9B70-70BD62B4EDCF}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - 한국어 언어 팩-->MsiExec.exe /X{2F884A17-E051-3DB7-B093-6274C98740F6}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - 日本語 Language Pack-->MsiExec.exe /X{73A64813-E631-3807-8E78-BA679EDA09A8}
Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support-->MsiExec.exe /X{5707EC26-AA9F-32C6-B7C1-347A3482CEC0}
Microsoft Visual Studio Tools for Applications 2012 x64 主控支援 - 繁體中文語言套件-->MsiExec.exe /X{FB501A6E-CA6D-36DA-8860-17F0E6D89155}
Microsoft Visual Studio Tools for Applications 2012 x64 托管支持 - 简体中文语言包-->MsiExec.exe /X{CD56C9B9-FB98-372B-8BC7-FDA312CD2511}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - DEU-Sprachpaket-->MsiExec.exe /X{CAAC553D-EE02-32D2-9F7E-FBC5C22E4C08}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Language Pack ITA-->MsiExec.exe /X{B8FD8F53-7E58-3DE5-A8FC-CB2B5CCF38CE}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Module linguistique Français-->MsiExec.exe /X{3371699A-C1EF-3AC3-B094-D338191FA6E9}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - Paquete de idioma ESN-->MsiExec.exe /X{A3EB1DE3-9D3F-34C2-BDE6-5A8A4B98CC37}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 한국어 언어 팩-->MsiExec.exe /X{955E1388-E1F1-320A-A018-24616ED60F95}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - 日本語 Language Pack-->MsiExec.exe /X{859C7535-6862-3867-B97E-816795E8AB65}
Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support-->MsiExec.exe /X{CF06B8C4-F6FC-3A4B-ADD0-04A1CAC3DD86}
Microsoft Visual Studio Tools for Applications 2012 x86 主控支援 - 繁體中文語言套件-->MsiExec.exe /X{0FE6DE07-8CBA-3F73-86B4-51B91E506D24}
Microsoft Visual Studio Tools for Applications 2012 x86 托管支持 - 简体中文语言包-->MsiExec.exe /X{7259BDDA-D888-309D-ADE1-84AA0CB24FE9}
Microsoft Visual Studio Tools for Applications 2012-->"C:\ProgramData\Package Cache\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}\vsta_setup.exe" /uninstall
Microsoft Word MUI (Czech) 2013-->MsiExec.exe /X{90150000-001B-0405-1000-0000000FF1CE}
Microsoft X MUI (Czech) 2013-->MsiExec.exe /X{90150000-0101-0405-1000-0000000FF1CE}
Microsoft_VC100_CRT_SP1_x64-->MsiExec.exe /I{680EDA59-9266-44B4-949E-0C24F65DFF82}
Microsoft_VC100_CRT_SP1_x86-->MsiExec.exe /I{E3B64CC5-C011-40C0-92BC-7316CD5E5688}
Mp3tag v2.57-->C:\Program Files (x86)\Mp3tag\Mp3tagUninstall.EXE
MSVC80_x64_v2-->MsiExec.exe /I{4D668D4F-FAA2-4726-834C-31F4614F312E}
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x64-->MsiExec.exe /I{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština-->MsiExec.exe /X{90150000-001F-0405-1000-0000000FF1CE}
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina-->MsiExec.exe /X{90150000-001F-041B-1000-0000000FF1CE}
Nero ControlCenter Help (CHM)-->MsiExec.exe /X{CDFE8F95-F80F-4115-9C3F-0E1FD8F9F58C}
Nero ControlCenter-->MsiExec.exe /X{ABC88553-8770-4B97-B43E-5A90647A5B63}
Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero ControlCenter-->MsiExec.exe /X{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}
Nero Core Components-->MsiExec.exe /X{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero MediaHome 4 Essentials-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="2M05-K084-MH3C-8Z0X-4XPU-X82L-4C97-M487-3M3C-4UX4-7T73-4W24-8H6Z"
Nero MediaHome 4 Help-->MsiExec.exe /X{69FC3B9A-4149-43DB-A557-6ED0C8D8BA44}
Nero MediaHome 4-->MsiExec.exe /X{99EF387E-633E-4CFB-BFA3-AB961B685DDF}
Nero Online Upgrade-->MsiExec.exe /X{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
Nero WaveEditor Help (CHM)-->MsiExec.exe /X{1D30EA2E-5341-493E-8D71-0EED788B6CD9}
Nero WaveEditor-->MsiExec.exe /I{831D3D7B-169D-47F3-9117-D74934BF71BF}
Nero WaveEditor-->MsiExec.exe /X{76335315-16A0-4DBB-B01C-5FDC6A5CB8A3}
Office 15 Click-to-Run Extensibility Component-->MsiExec.exe /X{90150000-008C-0000-0000-0000000FF1CE}
Office 15 Click-to-Run Extensibility Component-->MsiExec.exe /X{90150000-008C-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Licensing Component-->MsiExec.exe /I{90150000-007E-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Licensing Component-->MsiExec.exe /I{90150000-008F-0000-1000-0000000FF1CE}
Office 15 Click-to-Run Localization Component-->MsiExec.exe /X{90150000-008C-0405-0000-0000000FF1CE}
Office 15 Click-to-Run Localization Component-->MsiExec.exe /X{90150000-008C-0405-1000-0000000FF1CE}
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB-->MsiExec.exe /X{E237254B-36A1-3D27-815E-B37C13BE0796}
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB-->MsiExec.exe /X{03077B58-6ACF-32CA-B42A-EAA458C295A1}
ph-->MsiExec.exe /I{185F9795-9663-4F13-9EF9-307A282ADB5A}
PlayReady PC Runtime amd64-->MsiExec.exe /X{2E0C1D31-8FEC-411E-97FB-6E56BD429A98}
QuickTime 7-->MsiExec.exe /I{111EE7DF-FC45-40C7-98A7-753AC46B12FB}
Ralink RT2870 Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}\setup.exe -runfromtemp -l0x0005 -removeonly
Scan To-->MsiExec.exe /I{E8A34AC8-0137-4515-A94B-0A0946DDC251}
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Security Update for Microsoft Word 2013 (KB2863910) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{2B72C125-61D2-4850-9BF6-1CEC45643203}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0017-0405-1000-0000000FF1CE}" "{85EB11C5-7793-4386-8F93-3D15494EC269}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-1000-0000000FF1CE}" "{1E8252A7-D489-4BB6-9694-93799FFD33ED}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{DABB9E2A-F054-4F97-9EB2-6992316C6EC7}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{835E4BED-E265-4103-AE14-0B4C70CF3FE8}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-1000-0000000FF1CE}" "{4601BD00-BC9B-4CA2-940C-2552782C7347}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0405-1000-0000000FF1CE}" "{EC915383-0457-4D83-BE7A-009D7841E9C5}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{3F685A71-DF4A-4AC0-A110-0FA0B7FFD86C}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{6E88843F-58F2-45EB-8C4A-0DDFE45366E1}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0100-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0101-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{010BF41A-4D78-40C3-90BA-117DF64A0AE2}" "1029" "0"
Speccy-->"C:\Program Files\Speccy\uninst.exe"
Správce stahování z webu Microsoft-->MsiExec.exe /X{654977DB-0001-0002-0001-EABD228DDE8B}
SW-Booster-->"c:\programdata\appready software\sw-booster\sw-booster.exe" /uninstall
SW-Sustainer 1.80-->"C:\WINDOWS\system32\RUNDLL32.EXE" "C:\PROGRA~2\SW-Booster\Assistant.dll",_uninstall /un
System Requirements Lab for Intel-->MsiExec.exe /I{53C63F43-B827-42D9-8886-4698D91EA33B}
tools-freebsd-->MsiExec.exe /X{003BFBBD-6C67-419E-A24D-0DCAFC3A5249}
tools-linux-->MsiExec.exe /X{D102611A-6466-4101-A51D-51069303AC65}
tools-netware-->MsiExec.exe /X{197597A7-AD33-4898-9D8E-73066818B464}
tools-solaris-->MsiExec.exe /X{AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4}
tools-windows-->MsiExec.exe /X{FFD9383C-01D5-4897-A954-43AF599AED30}
tools-winPre2k-->MsiExec.exe /X{AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D}
Total Commander 64-bit (Remove or Repair)-->c:\totalcmd\tcunin64.exe
TP-LINK USB Printer Controller-->MsiExec.exe /X{3EC900B5-28EE-4472-A9FF-B11A879EC838}
Ulož.to File Manager verze 1.6-->"C:\Program Files (x86)\Ulozto File Manager\unins000.exe"
Unlocker 1.9.1-->C:\Program Files (x86)\Unlocker\uninst.exe
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Excel 2013 (KB2752087) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-1000-0000000FF1CE}" "{A2275591-C3AA-4A6C-A696-F958B6C65B3E}" "1029" "0"
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{B122F645-B955-43E5-BFF7-210DE47D9422}" "1029" "0"
Update for Microsoft Lync 2013 (KB2863908) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-1000-0000000FF1CE}" "{D064ADB5-9DB8-419C-9802-DC905D740E71}" "1029" "0"
Update for Microsoft Office 2013 (KB2817636) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{D97AACA3-9AEA-43FF-8CBA-93BED0443FC2}" "1029" "0"
Update for Microsoft Office 2013 (KB2825631) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{A54917FC-2C84-40F2-9525-7549BE08DE40}" "1029" "0"
Update for Microsoft Office 2013 (KB2827272) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-1000-0000000FF1CE}" "{50F6EF67-B93C-4B7A-A2EB-E179E3436C69}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-1000-0000000FF1CE}" "{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2863864) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0405-1000-0000000FF1CE}" "{AFB7E303-C8CA-4A08-AD3F-44A562B3C809}" "1029" "0"
Update for Microsoft OneNote 2013 (KB2817628) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-1000-0000000FF1CE}" "{9367C385-2EF9-4BE3-8351-7D2AB0798A57}" "1029" "0"
Update for Microsoft Outlook 2013 (KB2863911) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-1000-0000000FF1CE}" "{3102DD4D-D5F6-4FFC-8F8B-B939936C5948}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB2837627) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-1000-0000000FF1CE}" "{FE06DACB-AE2C-4DB7-B95D-97A320E59F45}" "1029" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1029" "0"
VC80CRTRedist - 8.0.50727.6195-->MsiExec.exe /I{933B4015-4618-4716-A828-5289FC03165F}
VLC media player 2.1.3-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
VMware Workstation-->"C:\ProgramData\VMware\VMware Workstation\Uninstaller\\uninstall.exe" -x -S "C:\ProgramData\VMware\VMware Workstation\Uninstaller\"
VMware Workstation-->MsiExec.exe /I{0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}
Win2PDF 7-->"C:\Windows\SysWOW64\spool\drivers\x64\3\Win2PDF\unins000.exe"
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe
YoutubeAdblocker-->"C:\ProgramData\YoutubeAdblocker\vE.exe" /s /n /i:"ExecuteCommands;UninstallCommands" ""
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS-->MsiExec.exe /X{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS-->MsiExec.exe /X{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}
======Hosts File======
127.0.0.1 08sr.combineads.info # hosts anti-adware / pups
127.0.0.1 08srvr.combineads.info # hosts anti-adware / pups
127.0.0.1 12srvr.combineads.info # hosts anti-adware / pups
127.0.0.1 2010-fr.com # hosts anti-adware / pups
127.0.0.1 2012-new.biz # hosts anti-adware / pups
127.0.0.1 212link.com # hosts anti-adware / pups
127.0.0.1 2319825.ourtoolbar.com # hosts anti-adware / pups
127.0.0.1 24h00business.com # hosts anti-adware / pups
127.0.0.1 a.adorika.net # hosts anti-adware / pups
127.0.0.1 a.ad-sys.com # hosts anti-adware / pups
======System event log======
Computer Name: windows-uj49s6b
Event Code: 13
Message: Operační systém se vypíná v systémovém čase 2012-07-26T07:29:19.110493400Z.
Record Number: 5
Source Name: Microsoft-Windows-Kernel-General
Time Written: 20120726072919.110493-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 109
Message: Správce napájení jádra inicioval přechod do režimu vypnutí.
Record Number: 4
Source Name: Microsoft-Windows-Kernel-Power
Time Written: 20120726072918.969937-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6005
Message: Služba Event Log byla spuštěna.
Record Number: 3
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6009
Message: Microsoft (R) Windows (R) 6.02. 9200 Multiprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
Computer Name: windows-uj49s6b
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z WINDOWS-UJ49S6B na WIN-USAC6I84RS7.
Record Number: 1
Source Name: EventLog
Time Written: 20130313004910.000000-000
Event Type: Informace
User:
=====Application event log=====
Computer Name: prac
Event Code: 16384
Message: Restartování služby Ochrana softwaru bylo úspěšně naplánováno na 2113-05-05T18:28:29Z. Důvod: RulesEngine
Record Number: 20595
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182829.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1003
Message: Služba Windows Search byla spuštěna.
Record Number: 20594
Source Name: Microsoft-Windows-Search
Time Written: 20130529182800.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 902
Message: Služba Ochrana softwaru byla spuštěna.
6.2.9200.16384
Record Number: 20593
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182759.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1003
Message: Služba Ochrana softwaru dokončila kontrolu stavu licencování.
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
Stav licencování=
1: 7b65fea6-df35-4e65-aaa7-bdf1fef5b24f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 7e324006-b4e8-4d0d-b52a-44c59af7b03f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )]
3: a00018a3-f20f-4632-bf7c-8daa5351c914, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: d9ec2828-d29e-4d1c-8fa7-bfe2c4786003, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: ec67814b-30e6-4a50-bf7b-d55daf729d1e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )]
Record Number: 20592
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182759.000000-000
Event Type: Informace
User:
Computer Name: prac
Event Code: 1066
Message: Inicializační stav pro objekty služby
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
Record Number: 20591
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130529182758.000000-000
Event Type: Informace
User:
=====Security event log=====
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\jvgasys.fon
ID popisovače: 0xb08
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174936
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.748064-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\h8514sys.fon
ID popisovače: 0xb14
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174935
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.734064-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.3.9600.16384_none_6fce425902968fa6\jvgafix.fon
ID popisovače: 0xad8
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174934
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.725063-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.3.9600.16384_none_74152cf1cad630d1\hvgasys.fon
ID popisovače: 0x948
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174933
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.707062-000
Event Type: Úspěšný audit
User:
Computer Name: prac
Event Code: 4907
Message: Nastavení auditu objektu se změnila.
Předmět:
ID zabezpečení: S-1-5-21-4119630896-2381959156-1040506587-1013
Název účtu: zdene_000
Doména účtu: PRAC
ID přihlášení: 0x223B2
Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\$Windows.~BT\Sources\SafeOS\Mount\Windows\WinSxS\amd64_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.3.9600.16384_none_6fce425902968fa6\hvgafix.fon
ID popisovače: 0xa4c
Informace o procesu:
ID procesu: 0x149c
Název procesu: C:\$Windows.~BT\Sources\SetupHost.exe
Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 174932
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140118105447.693061-000
Event Type: Úspěšný audit
User:
======Environment variables======
"FP_NO_HOST_CHECK"=NO
"USERNAME"=SYSTEM
"ComSpec"=%SystemRoot%\system32\cmd.exe
"TMP"=%SystemRoot%\TEMP
"OS"=Windows_NT
"windir"=%SystemRoot%
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"asl.log"=Destination=file
"Path"=%C_EM64T_REDIST11%bin\Intel64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\Common Files\Acronis\SnapAPI;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem\
"C_EM64T_REDIST11"=C:\Program Files (x86)\Common Files\Intel\Shared Files\cpp\
-----------------EOF-----------------
Re: zpomalený PC a net
Zdravim
Prispevky jsem sloucil do jednoho
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
- Probehne vytvoreni zalohy a nasledne prohledavani
- Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: zpomalený PC a net
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro with Media Center x64
Ran by zdeny on so 10. 05. 2014 at 23:56:28,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c670dcae-e392-aa32-6f42-143c7fc4bdfd}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\ZdenŘk\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 11. 05. 2014 at 0:02:17,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro with Media Center x64
Ran by zdeny on so 10. 05. 2014 at 23:56:28,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c670dcae-e392-aa32-6f42-143c7fc4bdfd}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E7B5F15E-AE02-463E-B459-B0533F5D0496}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\ZdenŘk\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 11. 05. 2014 at 0:02:17,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: zpomalený PC a net
# AdwCleaner v3.207 - Report created 11/05/2014 at 00:06:05
# Updated 05/05/2014 by Xplode
# Operating System : Windows 8.1 Pro with Media Center (64 bits)
# Username : zdeny - PRAC
# Running from : C:\Users\Zdeněk\Desktop\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : C:\WINDOWS\System32\Tasks\SW-Booster-S-5644911192
File Found : C:\WINDOWS\Tasks\SW-Booster-S-5644911192.job
Folder Found : C:\Program Files (x86)\saVe oNet
Folder Found : C:\Program Files (x86)\Search-NewTTab
Folder Found : C:\Program Files (x86)\SW-Booster
Folder Found : C:\ProgramData\saVe oNet
Folder Found : C:\ProgramData\Search-NewTTab
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\torch
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sw-booster\assistant.dll
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SW-Booster\Assistant_x64.dll
Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5644911192
Key Found : HKLM\Software\SW-Booster
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [freegames4357@bestoffers]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Google Chrome v34.0.1847.131
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
*************************
AdwCleaner[R0].txt - [15465 octets] - [11/05/2014 00:06:05]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [15526 octets] ##########
# Updated 05/05/2014 by Xplode
# Operating System : Windows 8.1 Pro with Media Center (64 bits)
# Username : zdeny - PRAC
# Running from : C:\Users\Zdeněk\Desktop\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : C:\WINDOWS\System32\Tasks\SW-Booster-S-5644911192
File Found : C:\WINDOWS\Tasks\SW-Booster-S-5644911192.job
Folder Found : C:\Program Files (x86)\saVe oNet
Folder Found : C:\Program Files (x86)\Search-NewTTab
Folder Found : C:\Program Files (x86)\SW-Booster
Folder Found : C:\ProgramData\saVe oNet
Folder Found : C:\ProgramData\Search-NewTTab
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Folder Found : C:\Users\Zdeněk\AppData\Local\torch
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sw-booster\assistant.dll
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SW-Booster\Assistant_x64.dll
Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5644911192
Key Found : HKLM\Software\SW-Booster
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [freegames4357@bestoffers]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Google Chrome v34.0.1847.131
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Found [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Found [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Found [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
*************************
AdwCleaner[R0].txt - [15465 octets] - [11/05/2014 00:06:05]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [15526 octets] ##########
Re: zpomalený PC a net
- Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: zpomalený PC a net
# AdwCleaner v3.207 - Report created 11/05/2014 at 08:49:54
# Updated 05/05/2014 by Xplode
# Operating System : Windows 8.1 Pro with Media Center (64 bits)
# Username : zdeny - PRAC
# Running from : C:\Users\Zdeněk\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\saVe oNet
Folder Deleted : C:\ProgramData\Search-NewTTab
Folder Deleted : C:\Program Files (x86)\SW-Booster
Folder Deleted : C:\Program Files (x86)\saVe oNet
Folder Deleted : C:\Program Files (x86)\Search-NewTTab
Folder Deleted : C:\Users\Zdeněk\AppData\Local\torch
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
File Deleted : C:\WINDOWS\Tasks\SW-Booster-S-5644911192.job
File Deleted : C:\WINDOWS\System32\Tasks\SW-Booster-S-5644911192
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [freegames4357@bestoffers]
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5644911192
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27}
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\SW-Booster
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sw-booster\assistant.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SW-Booster\Assistant_x64.dll
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Google Chrome v34.0.1847.131
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Deleted [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Deleted [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Deleted [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [15615 octets] - [11/05/2014 00:06:58]
AdwCleaner[R1].txt - [15676 octets] - [11/05/2014 08:49:45]
AdwCleaner[S0].txt - [11182 octets] - [11/05/2014 08:49:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11243 octets] ##########
# Updated 05/05/2014 by Xplode
# Operating System : Windows 8.1 Pro with Media Center (64 bits)
# Username : zdeny - PRAC
# Running from : C:\Users\Zdeněk\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\saVe oNet
Folder Deleted : C:\ProgramData\Search-NewTTab
Folder Deleted : C:\Program Files (x86)\SW-Booster
Folder Deleted : C:\Program Files (x86)\saVe oNet
Folder Deleted : C:\Program Files (x86)\Search-NewTTab
Folder Deleted : C:\Users\Zdeněk\AppData\Local\torch
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
[!] Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
File Deleted : C:\WINDOWS\Tasks\SW-Booster-S-5644911192.job
File Deleted : C:\WINDOWS\System32\Tasks\SW-Booster-S-5644911192
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [freegames4357@bestoffers]
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5644911192
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27}
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\SW-Booster
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sw-booster\assistant.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SW-Booster\Assistant_x64.dll
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Google Chrome v34.0.1847.131
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Homepage] : hxxp://websearch.searchsun.info/?pid=724&r=2014/05/07&hid=15373852152022734570&lg=EN&cc=CZ
Deleted [Extension] : anonfockfoeidfihjkpjefcdibgidfba
Deleted [Extension] : hnhidmbpcajodonaimppdjlahmhkeegi
Deleted [Extension] : iaofahnihkhbpkngpljdkdeepgpdfhmp
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [15615 octets] - [11/05/2014 00:06:58]
AdwCleaner[R1].txt - [15676 octets] - [11/05/2014 08:49:45]
AdwCleaner[S0].txt - [11182 octets] - [11/05/2014 08:49:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11243 octets] ##########
Re: zpomalený PC a net
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; emptyclsid; iedefaults; FFdefaults; CHRdefaults; emptyalltemp; resethosts;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: zpomalený PC a net
Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by zdeny on ne 11. 05. 2014 at 9:43:39,38.
Microsoft Windows 8.1 Pro s aplikací Media Center 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\ZDENK~1\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
11. 5. 2014 9:44:59 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-4119630896-2381959156-1040506587-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\quickprint@hp.com deleted successfully
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\CorelDRAW Graphics Suite X7 x64 deleted
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted
C:\Users\ZDENK~1\AppData\LocalLow\{E7B5F15E-AE02-463E-B459-B0533F5D0496} deleted
C:\Users\ZDENK~1\AppData\Local\Packages\windows_ie_ac_001\AC\{E7B5F15E-AE02-463E-B459-B0533F5D0496} deleted
C:\PROGRA~2\Hosts_Anti_Adwares_PUPs deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\WINDOWS\SysWow64\searchplugins deleted
C:\WINDOWS\SysWow64\Extensions deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{7DD5E91C-3864-77EC-7635-D14910C2A03E}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{7DD5E91C-3864-77EC-7635-D14910C2A03E}.old" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}.old" deleted
"C:\PROGRA~3\37d26fcc63b8d58c" deleted
==== Firefox Extensions Registry ======================
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"speedtest4354@BestOffers"="C:\Users\ZdenŘk\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers" [08. 03. 2014 19:00]
==== Chrome Look ======================
YoutubeAdblocker - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
Best Flash Play - ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
==== Chrome Fix ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchsun.info_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchsun.info_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_anonfockfoeidfihjkpjefcdibgidfba_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_anonfockfoeidfihjkpjefcdibgidfba_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnhidmbpcajodonaimppdjlahmhkeegi_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnhidmbpcajodonaimppdjlahmhkeegi_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iaofahnihkhbpkngpljdkdeepgpdfhmp_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iaofahnihkhbpkngpljdkdeepgpdfhmp_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_idknbmbdnapjicclomlijcgfpikmndhd_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_idknbmbdnapjicclomlijcgfpikmndhd_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://google.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://google.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
==== Reset Google Chrome ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34AB0FDB-11EC-FBBD-EED9-88053CC030B5} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9CE813B7-8159-311D-1901-BD69DB790640} deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\stani_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\stani_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\zdene_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\zdene_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\ZDENK~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\ZDENK~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=905 folders=389 15078178 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\stani_000\AppData\Local\Temp emptied successfully
C:\Users\zdene_000\AppData\Local\Temp emptied successfully
C:\Users\NEROME~1.PRA\AppData\Local\Temp emptied successfully
C:\Users\ZDENK~1\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\Users\ZDENK~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on ne 11. 05. 2014 at 10:17:01,22 ======================
Tool run by zdeny on ne 11. 05. 2014 at 9:43:39,38.
Microsoft Windows 8.1 Pro s aplikací Media Center 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\ZDENK~1\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
11. 5. 2014 9:44:59 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-4119630896-2381959156-1040506587-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\quickprint@hp.com deleted successfully
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\CorelDRAW Graphics Suite X7 x64 deleted
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted
C:\Users\ZDENK~1\AppData\LocalLow\{E7B5F15E-AE02-463E-B459-B0533F5D0496} deleted
C:\Users\ZDENK~1\AppData\Local\Packages\windows_ie_ac_001\AC\{E7B5F15E-AE02-463E-B459-B0533F5D0496} deleted
C:\PROGRA~2\Hosts_Anti_Adwares_PUPs deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\WINDOWS\SysWow64\searchplugins deleted
C:\WINDOWS\SysWow64\Extensions deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{7DD5E91C-3864-77EC-7635-D14910C2A03E}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{7DD5E91C-3864-77EC-7635-D14910C2A03E}.old" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}" deleted
"C:\PROGRA~3\37d26fcc63b8d58c\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}.old" deleted
"C:\PROGRA~3\37d26fcc63b8d58c" deleted
==== Firefox Extensions Registry ======================
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"speedtest4354@BestOffers"="C:\Users\ZdenŘk\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers" [08. 03. 2014 19:00]
==== Chrome Look ======================
YoutubeAdblocker - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Administrator\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Administrator\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Administrator\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - AirPrint\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - Guest\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - Guest\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - Guest\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - Guest\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - stani_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - stani_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - stani_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - stani_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - zdene_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - NEROME~1.PRA\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
Best Flash Play - ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
YoutubeAdblocker - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba
Search-NewTTab - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi
sAve neut - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp
Best Flash Play - ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd
==== Chrome Fix ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchsun.info_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchsun.info_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\anonfockfoeidfihjkpjefcdibgidfba deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_anonfockfoeidfihjkpjefcdibgidfba_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_anonfockfoeidfihjkpjefcdibgidfba_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hnhidmbpcajodonaimppdjlahmhkeegi deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnhidmbpcajodonaimppdjlahmhkeegi_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnhidmbpcajodonaimppdjlahmhkeegi_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iaofahnihkhbpkngpljdkdeepgpdfhmp deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iaofahnihkhbpkngpljdkdeepgpdfhmp_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iaofahnihkhbpkngpljdkdeepgpdfhmp_0.localstorage-journal deleted successfully
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\AirPrint\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\stani_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\zdene_000\AppData\Local\Torch\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Chromatic Browser\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_idknbmbdnapjicclomlijcgfpikmndhd_0.localstorage deleted successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_idknbmbdnapjicclomlijcgfpikmndhd_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://google.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://google.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
==== Reset Google Chrome ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34AB0FDB-11EC-FBBD-EED9-88053CC030B5} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9CE813B7-8159-311D-1901-BD69DB790640} deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\stani_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\stani_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\zdene_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\zdene_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\ZDENK~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\ZDENK~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\ZDENK~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=905 folders=389 15078178 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\NeroMediaHomeUser.4.prac\AppData\Local\Temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\stani_000\AppData\Local\Temp emptied successfully
C:\Users\zdene_000\AppData\Local\Temp emptied successfully
C:\Users\NEROME~1.PRA\AppData\Local\Temp emptied successfully
C:\Users\ZDENK~1\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\Users\ZDENK~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on ne 11. 05. 2014 at 10:17:01,22 ======================
Re: zpomalený PC a net
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nero MediaHome 4] => C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe [5179880 2012-12-20] (Nero AG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () BHO: No Name - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File S2 d0e87c27; "C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service 2014-05-11 11:07 - 2014-05-11 11:07 - 00015971 _____ () C:\Users\Zdeněk\Desktop\FRST.txt 2014-05-11 10:08 - 2014-05-11 09:43 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe 2014-05-11 09:44 - 2014-05-11 10:17 - 00045296 _____ () C:\zoek-results.log 2014-05-11 09:43 - 2014-05-11 10:06 - 00000000 ____D () C:\zoek_backup 2014-05-11 09:42 - 2014-05-11 09:43 - 01285120 _____ () C:\Users\Zdeněk\Desktop\zoek.exe 2014-05-11 00:02 - 2014-05-11 00:02 - 00001773 _____ () C:\Users\Zdeněk\Desktop\JRT.txt 2014-05-10 23:54 - 2014-05-10 23:54 - 01316991 _____ () C:\Users\Zdeněk\Desktop\adwcleaner.exe 2014-05-10 23:54 - 2014-05-10 23:54 - 01016261 _____ (Thisisu) C:\Users\Zdeněk\Desktop\JRT.exe Task: {84B95930-EF86-4A62-AAC6-AA2148436BF1} - \SW-Booster-S-5644911192 No Task File <==== ATTENTION Task: {1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} - \BrowserProtect No Task File <==== ATTENTION Task: {F2C02D26-1278-4630-9C2B-C6850F449161} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe AlternateDataStreams: C:\ProgramData\TEMP:AD022376 Hosts: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Re: zpomalený PC a net
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014
Ran by zdeny at 2014-05-11 12:01:01 Run:1
Running from C:\Users\Zdeněk\Downloads\frst
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Nero MediaHome 4] => C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe [5179880 2012-12-20] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
BHO: No Name - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File
S2 d0e87c27; "C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
2014-05-11 11:07 - 2014-05-11 11:07 - 00015971 _____ () C:\Users\Zdeněk\Desktop\FRST.txt
2014-05-11 10:08 - 2014-05-11 09:43 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-05-11 09:44 - 2014-05-11 10:17 - 00045296 _____ () C:\zoek-results.log
2014-05-11 09:43 - 2014-05-11 10:06 - 00000000 ____D () C:\zoek_backup
2014-05-11 09:42 - 2014-05-11 09:43 - 01285120 _____ () C:\Users\Zdeněk\Desktop\zoek.exe
2014-05-11 00:02 - 2014-05-11 00:02 - 00001773 _____ () C:\Users\Zdeněk\Desktop\JRT.txt
2014-05-10 23:54 - 2014-05-10 23:54 - 01316991 _____ () C:\Users\Zdeněk\Desktop\adwcleaner.exe
2014-05-10 23:54 - 2014-05-10 23:54 - 01016261 _____ (Thisisu) C:\Users\Zdeněk\Desktop\JRT.exe
Task: {84B95930-EF86-4A62-AAC6-AA2148436BF1} - \SW-Booster-S-5644911192 No Task File <==== ATTENTION
Task: {1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} - \BrowserProtect No Task File <==== ATTENTION
Task: {F2C02D26-1278-4630-9C2B-C6850F449161} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
Hosts:
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Nero MediaHome 4 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXMediaServer => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => Key deleted successfully.
HKCR\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => Key deleted successfully.
d0e87c27 => Service deleted successfully.
"C:\Users\Zdeněk\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Zdeněk\Desktop\zoek.exe => Moved successfully.
C:\Users\Zdeněk\Desktop\JRT.txt => Moved successfully.
C:\Users\Zdeněk\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Zdeněk\Desktop\JRT.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{84B95930-EF86-4A62-AAC6-AA2148436BF1} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84B95930-EF86-4A62-AAC6-AA2148436BF1} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SW-Booster-S-5644911192 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F2C02D26-1278-4630-9C2B-C6850F449161} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C02D26-1278-4630-9C2B-C6850F449161} => Key deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0 => Key deleted successfully.
C:\WINDOWS\Tasks\DriverToolkit Autorun.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job => Moved successfully.
C:\ProgramData\TEMP => ":AD022376" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
==== End of Fixlog ====
Ran by zdeny at 2014-05-11 12:01:01 Run:1
Running from C:\Users\Zdeněk\Downloads\frst
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Nero MediaHome 4] => C:\Program Files (x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe [5179880 2012-12-20] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
BHO: No Name - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File
S2 d0e87c27; "C:\WINDOWS\system32\rundll32.exe" "c:\progra~2\sw-booster\assistantSvc.dll",service
2014-05-11 11:07 - 2014-05-11 11:07 - 00015971 _____ () C:\Users\Zdeněk\Desktop\FRST.txt
2014-05-11 10:08 - 2014-05-11 09:43 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-05-11 09:44 - 2014-05-11 10:17 - 00045296 _____ () C:\zoek-results.log
2014-05-11 09:43 - 2014-05-11 10:06 - 00000000 ____D () C:\zoek_backup
2014-05-11 09:42 - 2014-05-11 09:43 - 01285120 _____ () C:\Users\Zdeněk\Desktop\zoek.exe
2014-05-11 00:02 - 2014-05-11 00:02 - 00001773 _____ () C:\Users\Zdeněk\Desktop\JRT.txt
2014-05-10 23:54 - 2014-05-10 23:54 - 01316991 _____ () C:\Users\Zdeněk\Desktop\adwcleaner.exe
2014-05-10 23:54 - 2014-05-10 23:54 - 01016261 _____ (Thisisu) C:\Users\Zdeněk\Desktop\JRT.exe
Task: {84B95930-EF86-4A62-AAC6-AA2148436BF1} - \SW-Booster-S-5644911192 No Task File <==== ATTENTION
Task: {1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} - \BrowserProtect No Task File <==== ATTENTION
Task: {F2C02D26-1278-4630-9C2B-C6850F449161} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
Hosts:
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Nero MediaHome 4 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXMediaServer => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => Key deleted successfully.
HKCR\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => Key deleted successfully.
d0e87c27 => Service deleted successfully.
"C:\Users\Zdeněk\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Zdeněk\Desktop\zoek.exe => Moved successfully.
C:\Users\Zdeněk\Desktop\JRT.txt => Moved successfully.
C:\Users\Zdeněk\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Zdeněk\Desktop\JRT.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{84B95930-EF86-4A62-AAC6-AA2148436BF1} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84B95930-EF86-4A62-AAC6-AA2148436BF1} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SW-Booster-S-5644911192 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1624E64D-1FAE-4E4F-9EB6-011D406A5CE0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F2C02D26-1278-4630-9C2B-C6850F449161} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C02D26-1278-4630-9C2B-C6850F449161} => Key deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0 => Key deleted successfully.
C:\WINDOWS\Tasks\DriverToolkit Autorun.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7d474301b130.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cef3767035b38e.job => Moved successfully.
C:\ProgramData\TEMP => ":AD022376" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
==== End of Fixlog ====



Přispějete na provoz fóra?