Windows 7 ultimate 64bit, zasekávání systému

[no_gravity]

Zdravím, jedna úžasná osůbka mi poradila toto fórum s tím, že byste mi mohli pomoci s mým problémem.
Jedná se o to, že se mi (dříve vyjimečně, teď už velmi často) sekne systém tak, že se mi všude ukáže (neodpovídá), a dokonce když najedu ukazatelem na lištu s otevřenými aplikacemi, ukazatel se změní v ono 'kolečko' které značí loading. Se systémem pak nejde nic udělat, občas dokonce nejde ani hard reset pomocí tlačítka, musím provést podržení vypínače. Nejčastěji používané aplikace jsou: Trillian, Mozilla Firefox a steam, ale seknutí zařízení je nepravidelné s těmito aplikacemi.
Nevíte, čím by to mohlo být?

[Rudy]

Zdravím!
Zkusíme tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

[no_gravity]

Safra, ten druhý program nejde stáhnout, je nějaká alternativa?

[Rudy]

Tak dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=24&t=130784 .

[no_gravity]

Dobrá, mám log, mám jej nyní vložit sem, nebo do vlákna, které je v sekci 'Havěť - viry, spyware, rootkity' ?
Prosím, mějte se mnou trpělivost, mám snahu, ale nejsem na tohle odborník...

[Rudy]

Vložte ho sem.

[no_gravity]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Radek (administrator) on RADEK-PC on 02-08-2014 15:24:35
Running from C:\Users\Radek\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
(Robert McNeel & Associates) C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Trillian\plugins\skypekit.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Radek\Desktop\FRST64(1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928 2014-02-11] (IObit)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {8092b058-e54a-11e0-8114-50e5493be47c} - E:\steambackup2.EXE
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {c6c5a4c8-e4ac-11e0-b2c1-806e6f6e6963} - D:\Run.exe
Startup: C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
SearchScopes: HKCU - DefaultScope {4F7660E9-6DD9-4e32-A11F-7EA356121ADB} URL = http://uk.search.yahoo.com/search?p={se ... ype=IEBDSV
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
SearchScopes: HKCU - {4F7660E9-6DD9-4e32-A11F-7EA356121ADB} URL = http://uk.search.yahoo.com/search?p={se ... ype=IEBDSV
SearchScopes: HKCU - {57EA2068-C59C-4789-BDAD-B28D7402028F} URL = http://www.google.com/cse?cx=partner-pu ... earchTerms}
SearchScopes: HKCU - {D6BB3A7E-DA07-4c94-933C-A5E4E9CF3239} URL = http://www.bing.com/search?q={searchTer ... R1&pc=SPLH
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Radek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF user.js: detected! => C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\ascsurfingprotection@iobit.com [2014-08-01]
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\fbp@fbpurity.com.xpi [2014-08-01]
FF Extension: Adblock Plus - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-31] (AVAST Software)
R2 DES2 Service; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [68136 2009-06-17] ()
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 McNeelUpdate; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67752 2012-10-25] (Robert McNeel & Associates)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-10] ()
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148632 2011-09-28] (Crawler.com)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-31] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-31] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-11] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2011-11-08] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2011-10-04] (Windows (R) Win 7 DDK provider)
R2 sp_rsdrv2; C:\Windows\SysWOW64\DRIVERS\stflt.sys [51496 2011-10-04] (Windows (R) Win 7 DDK provider)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-02 08:13 - 2014-08-02 12:47 - 00000000 ____D () C:\Users\Radek\Documents\dokumenty záloha
2014-08-02 06:45 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-02 06:45 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-08-02 06:45 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-02 06:36 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 06:36 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 06:36 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 06:36 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 06:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 06:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-02 06:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-02 06:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-01 21:10 - 2014-08-01 21:10 - 553704047 _____ () C:\Windows\MEMORY.DMP
2014-08-01 21:10 - 2014-08-01 21:10 - 00287376 _____ () C:\Windows\Minidump\080114-24304-01.dmp
2014-08-01 20:43 - 2014-08-01 20:44 - 00040347 _____ () C:\Users\Radek\Desktop\Addition.txt
2014-08-01 20:42 - 2014-08-02 15:24 - 00017249 _____ () C:\Users\Radek\Desktop\FRST.txt
2014-08-01 20:42 - 2014-08-02 15:24 - 00000000 ____D () C:\FRST
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\rsit
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\Program Files\trend micro
2014-08-01 20:02 - 2014-08-02 14:56 - 00001120 _____ () C:\Windows\setupact.log
2014-08-01 20:02 - 2014-08-01 20:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-01 19:59 - 2014-08-01 19:59 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00000000 ____D () C:\f9e2593ffdaac809474d
2014-08-01 19:53 - 2014-08-01 19:53 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-08-01 19:53 - 2014-08-01 19:53 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-01 19:19 - 2014-08-01 19:19 - 86720512 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 47206400 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00221184 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SAM.iobit
2014-08-01 19:12 - 2014-08-01 19:12 - 00003094 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2014-08-01 19:12 - 2014-08-01 19:12 - 00002886 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-08-01 19:12 - 2014-08-01 19:12 - 00001228 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Apple Computer
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-01 19:09 - 2014-08-01 20:21 - 00002205 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-08-01 19:09 - 2014-08-01 19:12 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00002850 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Radek
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-01 19:08 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\IObit
2014-08-01 19:08 - 2014-08-01 19:08 - 00000223 _____ () C:\ASCInit.log
2014-08-01 19:06 - 2014-08-01 19:06 - 02094080 _____ (Farbar) C:\Users\Radek\Desktop\FRST64(1).exe
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-08-01 14:00 - 2014-08-01 14:00 - 00001684 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-01 13:33 - 2014-08-01 13:33 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\ParetoLogic
2014-08-01 13:33 - 2014-08-01 13:33 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\DriverCure
2014-08-01 13:31 - 2014-08-01 13:53 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-01 13:00 - 2014-08-01 13:00 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-08-01 13:00 - 2014-08-01 13:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 13:00 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-08-01 09:41 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-08-01 09:41 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-08-01 09:41 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-08-01 09:41 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-01 09:41 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-08-01 09:40 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-08-01 09:40 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-08-01 09:40 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-08-01 09:40 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-08-01 09:40 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-08-01 09:40 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-08-01 09:40 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-08-01 09:40 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-08-01 09:40 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-08-01 09:38 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-08-01 09:38 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-08-01 09:38 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-01 09:38 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-08-01 09:38 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-08-01 09:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-08-01 09:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-08-01 09:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-08-01 09:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-08-01 09:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-08-01 09:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-08-01 09:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-08-01 09:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-08-01 09:38 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-01 09:38 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-01 09:34 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-08-01 09:34 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-08-01 09:34 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-08-01 09:34 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-08-01 09:34 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-08-01 09:34 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-08-01 09:34 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-08-01 09:34 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-08-01 09:33 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-31 14:32 - 2014-07-31 14:31 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-31 14:31 - 2014-07-31 14:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-31 14:31 - 2014-07-31 14:31 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-25 11:46 - 2014-07-25 11:46 - 00000000 ____D () C:\Users\Radek\AppData\Local\MidSpace
2014-07-25 11:45 - 2014-07-25 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MidSpace
2014-07-25 11:44 - 2014-07-25 11:44 - 00000000 ____D () C:\Program Files (x86)\MidSpace
2014-07-24 12:45 - 2014-07-24 12:45 - 00000222 _____ () C:\Users\Radek\Desktop\Unturned.url
2014-07-24 07:23 - 2014-07-24 07:23 - 00000000 ____D () C:\Users\Radek\AppData\Local\Harebrained Schemes
2014-07-20 19:37 - 2014-07-20 19:37 - 00039607 _____ () C:\731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
2014-07-19 10:33 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-19 10:32 - 2014-07-19 10:32 - 00004114 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-19 10:32 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-19 10:32 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-19 10:32 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-15 13:59 - 2014-07-15 13:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-09 22:07 - 2014-07-09 22:07 - 00001010 _____ () C:\Users\Radek\Desktop\sdfgs.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-02 15:25 - 2014-08-01 20:42 - 00017249 _____ () C:\Users\Radek\Desktop\FRST.txt
2014-08-02 15:24 - 2014-08-01 20:42 - 00000000 ____D () C:\FRST
2014-08-02 15:12 - 2012-04-12 17:12 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-02 15:05 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-02 15:05 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-02 14:57 - 2014-05-25 19:23 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-02 14:57 - 2012-10-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-02 14:56 - 2014-08-01 20:02 - 00001120 _____ () C:\Windows\setupact.log
2014-08-02 14:56 - 2011-09-21 20:20 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-08-02 14:56 - 2011-09-21 20:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-02 14:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-02 14:34 - 2014-05-25 19:23 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-02 14:27 - 2012-05-04 22:52 - 01305555 _____ () C:\Windows\WindowsUpdate.log
2014-08-02 13:30 - 2013-10-28 12:53 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-02 13:23 - 2012-03-07 21:25 - 00000000 ____D () C:\Users\Radek\Downloads\videa
2014-08-02 12:55 - 2011-10-04 17:49 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-08-02 12:47 - 2014-08-02 08:13 - 00000000 ____D () C:\Users\Radek\Documents\dokumenty záloha
2014-08-02 12:26 - 2012-06-11 22:06 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-08-02 09:11 - 2009-07-14 17:18 - 00685228 _____ () C:\Windows\system32\perfh005.dat
2014-08-02 09:11 - 2009-07-14 17:18 - 00151890 _____ () C:\Windows\system32\perfc005.dat
2014-08-02 09:11 - 2009-07-14 07:13 - 01620964 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-02 09:08 - 2014-04-03 20:56 - 00000000 ____D () C:\Users\Radek\Downloads\torrenty
2014-08-02 08:37 - 2011-09-29 20:03 - 00000000 ____D () C:\Users\Radek\Documents\My Games
2014-08-02 08:12 - 2012-05-20 16:50 - 00002516 ___SH () C:\ProgramData\KGyGaAvL.sys
2014-08-02 08:12 - 2012-05-20 16:50 - 00000088 __RSH () C:\ProgramData\BB19C957D1.sys
2014-08-02 07:58 - 2013-11-05 22:56 - 00000000 ____D () C:\Users\Radek\Downloads\modely
2014-08-02 07:22 - 2011-09-22 20:59 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Media Player Classic
2014-08-01 21:10 - 2014-08-01 21:10 - 553704047 _____ () C:\Windows\MEMORY.DMP
2014-08-01 21:10 - 2014-08-01 21:10 - 00287376 _____ () C:\Windows\Minidump\080114-24304-01.dmp
2014-08-01 21:10 - 2011-09-29 14:15 - 00000000 ____D () C:\Windows\Minidump
2014-08-01 20:44 - 2014-08-01 20:43 - 00040347 _____ () C:\Users\Radek\Desktop\Addition.txt
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\rsit
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\Program Files\trend micro
2014-08-01 20:21 - 2014-08-01 19:09 - 00002205 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-08-01 20:13 - 2011-10-07 07:14 - 01587452 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-08-01 20:07 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-01 20:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-01 20:02 - 2014-08-01 20:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-01 19:59 - 2014-08-01 19:59 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00000000 ____D () C:\f9e2593ffdaac809474d
2014-08-01 19:53 - 2014-08-01 19:53 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-08-01 19:53 - 2014-08-01 19:53 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-01 19:46 - 2011-09-22 02:02 - 00000000 ____D () C:\Users\Radek
2014-08-01 19:27 - 2014-04-26 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCAD 0.13
2014-08-01 19:27 - 2013-12-08 12:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warplanes
2014-08-01 19:27 - 2011-09-28 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 2 (CZ)
2014-08-01 19:27 - 2011-09-22 02:51 - 00000000 ____D () C:\Windows\Panther
2014-08-01 19:19 - 2014-08-01 19:19 - 86720512 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 47206400 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00221184 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SAM.iobit
2014-08-01 19:12 - 2014-08-01 19:12 - 00003094 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2014-08-01 19:12 - 2014-08-01 19:12 - 00002886 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-08-01 19:12 - 2014-08-01 19:12 - 00001228 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Apple Computer
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-01 19:12 - 2014-08-01 19:09 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-01 19:12 - 2014-08-01 19:08 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00002850 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Radek
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-01 19:08 - 2014-08-01 19:08 - 00000223 _____ () C:\ASCInit.log
2014-08-01 19:06 - 2014-08-01 19:06 - 02094080 _____ (Farbar) C:\Users\Radek\Desktop\FRST64(1).exe
2014-08-01 17:33 - 2011-12-23 23:55 - 00000000 ____D () C:\Program Files (x86)\Carambis
2014-08-01 17:30 - 2012-10-01 20:59 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-01 17:30 - 2011-09-28 08:40 - 00000000 ____D () C:\Games
2014-08-01 15:26 - 2011-09-22 02:02 - 00001393 _____ () C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-01 15:25 - 2009-07-14 07:08 - 00032594 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2011-09-22 21:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-01 14:00 - 2014-08-01 14:00 - 00001684 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-01 13:53 - 2014-08-01 13:31 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-01 13:33 - 2014-08-01 13:33 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\ParetoLogic
2014-08-01 13:33 - 2014-08-01 13:33 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\DriverCure
2014-08-01 13:31 - 2014-04-13 16:26 - 00000000 ____D () C:\Users\Radek\AppData\Local\Facebook
2014-08-01 13:22 - 2011-09-28 19:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-01 13:19 - 2011-10-03 08:04 - 00000000 ____D () C:\Users\Radek\AppData\Local\Deployment
2014-08-01 13:00 - 2014-08-01 13:00 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-08-01 13:00 - 2014-08-01 13:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-01 13:00 - 2014-08-01 12:59 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-01 11:54 - 2009-07-14 17:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-01 11:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-01 11:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-01 10:36 - 2012-12-22 10:46 - 00500096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-01 09:52 - 2013-10-27 10:56 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-01 07:22 - 2011-10-07 22:36 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\uTorrent
2014-08-01 07:22 - 2011-09-22 20:45 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Winamp
2014-08-01 05:55 - 2014-05-25 19:25 - 00000000 ___RD () C:\Users\Radek\Disk Google
2014-07-31 14:32 - 2013-10-28 12:57 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-31 14:32 - 2011-10-04 17:50 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-31 14:31 - 2014-07-31 14:32 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-31 14:31 - 2014-07-31 14:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-31 14:31 - 2014-07-31 14:31 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-31 14:31 - 2013-10-28 12:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-31 14:31 - 2013-10-28 12:53 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-31 14:31 - 2013-10-28 12:53 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-31 14:31 - 2011-10-04 17:50 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-31 14:31 - 2011-10-04 17:50 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-31 14:31 - 2011-10-04 17:50 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-25 11:46 - 2014-07-25 11:46 - 00000000 ____D () C:\Users\Radek\AppData\Local\MidSpace
2014-07-25 11:45 - 2014-07-25 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MidSpace
2014-07-25 11:44 - 2014-07-25 11:44 - 00000000 ____D () C:\Program Files (x86)\MidSpace
2014-07-24 12:45 - 2014-07-24 12:45 - 00000222 _____ () C:\Users\Radek\Desktop\Unturned.url
2014-07-24 07:23 - 2014-07-24 07:23 - 00000000 ____D () C:\Users\Radek\AppData\Local\Harebrained Schemes
2014-07-24 06:48 - 2014-06-18 19:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-24 06:48 - 2012-04-25 18:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-23 10:52 - 2011-09-22 20:59 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-23 07:56 - 2014-06-06 18:31 - 00000000 ____D () C:\ProgramData\WarThunder
2014-07-23 06:56 - 2014-05-10 07:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-07-20 19:37 - 2014-07-20 19:37 - 00039607 _____ () C:\731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
2014-07-19 10:33 - 2013-12-11 10:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-19 10:32 - 2014-07-19 10:32 - 00004114 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-19 10:32 - 2011-09-22 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-16 07:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-15 14:03 - 2012-10-06 21:11 - 00000000 ____D () C:\Users\Radek\AppData\Local\4A Games
2014-07-15 13:59 - 2014-07-15 13:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-15 13:59 - 2011-09-21 20:19 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-11 03:02 - 2014-07-19 10:32 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-19 10:33 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-19 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-19 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-09 22:07 - 2014-07-09 22:07 - 00001010 _____ () C:\Users\Radek\Desktop\sdfgs.txt
2014-07-09 18:12 - 2012-04-12 17:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 18:12 - 2012-04-12 17:12 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 18:12 - 2011-09-25 17:08 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-07 17:37 - 2014-05-25 19:24 - 00002042 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00002040 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 14:27

==================== End Of Log ============================

[Rudy]

Především doporučuji odinstalovat všechny produkty IOBit. Důvod: viewtopic.php?f=14&t=127320 .

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {8092b058-e54a-11e0-8114-50e5493be47c} - E:\steambackup2.EXE
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {c6c5a4c8-e4ac-11e0-b2c1-806e6f6e6963} - D:\Run.exe
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
SearchScopes: HKCU - {D6BB3A7E-DA07-4c94-933C-A5E4E9CF3239} URL = http://www.bing.com/search?q={searchTer ... R1&pc=SPLH
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\fbp@fbpurity.com.xpi [2014-08-01]
C:\731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\ProgramData\KGyGaAvL.sys
C:\ProgramData\BB19C957D1.sys
C:\Users\Radek\AppData\Local\Facebook
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[no_gravity]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-07-2014 02
Ran by Radek at 2014-08-02 18:25:58 Run:1
Running from C:\Users\Radek\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32...Run [SunJavaUpdateSched] = CProgram Files (x86)Common FilesJavaJava Updatejusched.exe [256896 2014-07-11] (Oracle Corporation)
HKUS-1-5-21-2314290084-1386636348-271833993-1000...MountPoints2 {8092b058-e54a-11e0-8114-50e5493be47c} - Esteambackup2.EXE
HKUS-1-5-21-2314290084-1386636348-271833993-1000...MountPoints2 {c6c5a4c8-e4ac-11e0-b2c1-806e6f6e6963} - DRun.exe
SearchScopes HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = httpstart.facemoods.coma=ddrnw&s={searchTerms}&f=4
SearchScopes HKCU - {D6BB3A7E-DA07-4c94-933C-A5E4E9CF3239} URL = httpwww.bing.comsearchq={searchTerms}&form=SPLBR1&pc=SPLH
BHO GBHO.BHO - {45d30484-7ded-43d9-957a-d2fd1f046511} - CWindowssystem32mscoree.dll (Microsoft Corporation)
Toolbar HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar HKLM-x32 - No Name - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Toolbar HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
FF Plugin @microsoft.comGENUINE - disabled No File
FF Plugin-x32 @microsoft.comGENUINE - disabled No File
FF Extension F.B. Purity - Cleans Up Facebook - CUsersRadekAppDataRoamingMozillaFirefoxProfiles86bcq1os.default-1406904562761Extensionsfbp@fbpurity.com.xpi [2014-08-01]
C731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
CWindowsTasksGoogleUpdateTaskMachineCore.job
CWindowsTasksGoogleUpdateTaskMachineUA.job
CProgramDataKGyGaAvL.sys
CProgramDataBB19C957D1.sys
CUsersRadekAppDataLocalFacebook
End
*****************

HKLM-x32...Run [SunJavaUpdateSched] = CProgram Files (x86)Common FilesJavaJava Updatejusched.exe [256896 2014-07-11] (Oracle Corporation) => Error: No automatic fix found for this entry.
HKUS-1-5-21-2314290084-1386636348-271833993-1000...MountPoints2 {8092b058-e54a-11e0-8114-50e5493be47c} - Esteambackup2.EXE => Error: No automatic fix found for this entry.
HKUS-1-5-21-2314290084-1386636348-271833993-1000...MountPoints2 {c6c5a4c8-e4ac-11e0-b2c1-806e6f6e6963} - DRun.exe => Error: No automatic fix found for this entry.
SearchScopes HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = httpstart.facemoods.coma=ddrnw&s={searchTerms}&f=4 => Error: No automatic fix found for this entry.
SearchScopes HKCU - {D6BB3A7E-DA07-4c94-933C-A5E4E9CF3239} URL = httpwww.bing.comsearchq={searchTerms}&form=SPLBR1&pc=SPLH => Error: No automatic fix found for this entry.
BHO GBHO.BHO - {45d30484-7ded-43d9-957a-d2fd1f046511} - CWindowssystem32mscoree.dll (Microsoft Corporation) => Error: No automatic fix found for this entry.
Toolbar HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File => Error: No automatic fix found for this entry.
Toolbar HKLM-x32 - No Name - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File => Error: No automatic fix found for this entry.
Toolbar HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File => Error: No automatic fix found for this entry.
FF Plugin @microsoft.comGENUINE - disabled No File => Error: No automatic fix found for this entry.
FF Plugin-x32 @microsoft.comGENUINE - disabled No File => Error: No automatic fix found for this entry.
FF Extension F.B. Purity - Cleans Up Facebook - CUsersRadekAppDataRoamingMozillaFirefoxProfiles86bcq1os.default-1406904562761Extensionsfbp@fbpurity.com.xpi [2014-08-01] => Error: No automatic fix found for this entry.
C731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp => Error: No automatic fix found for this entry.
CWindowsTasksGoogleUpdateTaskMachineCore.job => Error: No automatic fix found for this entry.
CWindowsTasksGoogleUpdateTaskMachineUA.job => Error: No automatic fix found for this entry.
CProgramDataKGyGaAvL.sys => Error: No automatic fix found for this entry.
CProgramDataBB19C957D1.sys => Error: No automatic fix found for this entry.
CUsersRadekAppDataLocalFacebook => Error: No automatic fix found for this entry.

==== End of Fixlog ====

[Rudy]

Nějak se nedaří. Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=24&t=130784 .

[no_gravity]

Logfile of random's system information tool 1.10 (written by random/random)
Run by Radek at 2014-08-02 18:30:33
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 486 GB (68%) free of 715 GB
Total RAM: 4079 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:30:37, on 2.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Trillian\trillian.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
c:\program files (x86)\trillian\plugins\skypekit.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
C:\Program Files\trend micro\Radek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - (no file)
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Radek\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2314290084-1386636348-271833993-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2314290084-1386636348-271833993-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: McNeel Update Service 5.0 (McNeelUpdate) - Robert McNeel & Associates - C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Protexis Licensing V2 x64 (PSI_SVC_2_x64) - arvato digital services llc - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11686 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\PROGRAM FILES\NVIDIA CORPORATION\DISPLAY\NVXDSYNC.EXE"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"taskhost.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Trillian\trillian.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
taskeng.exe {6247A90D-B443-4A3C-B4BC-BFA7D74DA425}
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
skypekit.exe -p "49199" -f "c:\users\radek\appdata\roaming\trillian\users\maw_echo419\skype"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe"
"C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe"
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
WLIDSvcM.exe 3324
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Steam\Steam.exe" "-silent"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=832.19674140.1975064996 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 832 "\\.\pipe\gecko-crash-server-pipe.832" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe" --proxy-stub-channel=Flash4568.684D0D80.15578 --host-broker-channel=Flash4568.684D0D80.1738 --host-pid=4568 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe" --channel=4856.004CF6F4.1547124664 --proxy-stub-channel=Flash4568.684D0D80.15578 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe" /SkipUac
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\Radek\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.3.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
NPOFF12.DLL
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\extensions\
ascsurfingprotection@iobit.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
GBHO.BHO - C:\Windows\system32\mscoree.dll [2010-11-05 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-09-01 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-31 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-09-01 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-31 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2014-02-20 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1d09c093-f71e-43c3-b948-19316cbd695e} - Smart Recovery 2 - C:\Windows\system32\mscoree.dll [2010-11-05 444752]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2012-09-07 2777296]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2014-07-16 1753280]
"Advanced SystemCare 7"=C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2014-02-11 2288928]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-06-27 24477056]
"Facebook Update"=C:\Users\Radek\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver []
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-08-28 3671904]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-31 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Trillian.lnk - C:\Program Files (x86)\Trillian\trillian.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-02 06:47:50 ----SHD---- C:\Config.Msi
2014-08-02 06:45:35 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-02 06:45:35 ----A---- C:\Windows\system32\rdpcorets.dll
2014-08-02 06:45:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-02 06:36:11 ----A---- C:\Windows\system32\wups2.dll
2014-08-02 06:36:11 ----A---- C:\Windows\system32\wucltux.dll
2014-08-02 06:36:11 ----A---- C:\Windows\system32\wuaueng.dll
2014-08-02 06:36:11 ----A---- C:\Windows\system32\wuauclt.exe
2014-08-02 06:34:41 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-08-02 06:34:41 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-08-02 06:34:41 ----A---- C:\Windows\system32\wuwebv.dll
2014-08-02 06:34:41 ----A---- C:\Windows\system32\wuapp.exe
2014-08-01 20:42:44 ----D---- C:\FRST
2014-08-01 20:24:48 ----D---- C:\rsit
2014-08-01 20:24:48 ----D---- C:\Program Files\trend micro
2014-08-01 19:59:55 ----D---- C:\f9e2593ffdaac809474d
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-08-01 19:59:12 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\wksprtPS.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\wksprt.exe
2014-08-01 19:59:12 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-08-01 19:59:12 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-01 19:59:12 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\tsgqec.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\rdpudd.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\mstscax.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\mstsc.exe
2014-08-01 19:59:12 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-08-01 19:59:12 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-08-01 19:59:12 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-08-01 19:59:12 ----A---- C:\Windows\system32\aaclient.dll
2014-08-01 19:53:56 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-08-01 19:53:56 ----A---- C:\Windows\system32\qdvd.dll
2014-08-01 19:52:37 ----D---- C:\Windows\SYSWOW64\Wat
2014-08-01 19:52:37 ----D---- C:\Windows\system32\Wat
2014-08-01 19:12:19 ----D---- C:\Users\Radek\AppData\Roaming\Apple Computer
2014-08-01 19:12:03 ----D---- C:\ProgramData\ProductData
2014-08-01 19:09:38 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-01 19:09:34 ----D---- C:\ProgramData\IObit
2014-08-01 19:09:26 ----D---- C:\Program Files (x86)\IObit
2014-08-01 19:08:24 ----D---- C:\Users\Radek\AppData\Roaming\IObit
2014-08-01 15:22:27 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-08-01 14:00:45 ----D---- C:\Program Files\Defraggler
2014-08-01 13:33:14 ----D---- C:\Users\Radek\AppData\Roaming\ParetoLogic
2014-08-01 13:33:14 ----D---- C:\Users\Radek\AppData\Roaming\DriverCure
2014-08-01 13:31:49 ----D---- C:\ProgramData\ParetoLogic
2014-08-01 13:00:08 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-08-01 13:00:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-01 13:00:00 ----A---- C:\Windows\system32\elshyph.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\url.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-01 12:59:59 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\wininet.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\urlmon.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-01 12:59:58 ----A---- C:\Windows\system32\msrating.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\msls31.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\jsIntl.dll
2014-08-01 12:59:58 ----A---- C:\Windows\system32\iertutil.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\wextract.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\webcheck.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\vbscript.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\url.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\occache.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\mshtmler.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\mshtml.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\msfeedssync.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\licmgr10.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\jscript9.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\inseng.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\iexpress.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ieui.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\iesysprep.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\iesetup.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\iernonce.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ieframe.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ieapfltr.dat
2014-08-01 12:59:57 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-01 12:59:57 ----A---- C:\Windows\system32\icardie.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-01 12:59:57 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\pngfilt.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\mshta.exe
2014-08-01 12:59:56 ----A---- C:\Windows\system32\jscript.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\imgutil.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\iepeers.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-01 12:59:56 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-01 11:46:46 ----D---- C:\Windows\Migration
2014-08-01 09:41:31 ----A---- C:\Windows\system32\usp10.dll
2014-08-01 09:41:30 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-08-01 09:41:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-08-01 09:41:29 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-08-01 09:41:27 ----A---- C:\Windows\system32\drivers\afd.sys
2014-08-01 09:41:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-08-01 09:41:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-08-01 09:41:09 ----A---- C:\Windows\system32\msv1_0.dll
2014-08-01 09:41:09 ----A---- C:\Windows\system32\kerberos.dll
2014-08-01 09:41:08 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-08-01 09:41:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-08-01 09:41:08 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-08-01 09:41:08 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-08-01 09:41:08 ----A---- C:\Windows\system32\wdigest.dll
2014-08-01 09:41:08 ----A---- C:\Windows\system32\TSpkg.dll
2014-08-01 09:41:08 ----A---- C:\Windows\system32\schannel.dll
2014-08-01 09:41:08 ----A---- C:\Windows\system32\ncrypt.dll
2014-08-01 09:41:07 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-08-01 09:41:07 ----A---- C:\Windows\system32\credssp.dll
2014-08-01 09:40:37 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-08-01 09:40:37 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-08-01 09:40:36 ----A---- C:\Windows\system32\winlogon.exe
2014-08-01 09:40:36 ----A---- C:\Windows\system32\objsel.dll
2014-08-01 09:40:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-08-01 09:40:33 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-08-01 09:40:33 ----A---- C:\Windows\system32\KernelBase.dll
2014-08-01 09:40:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-08-01 09:40:31 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-08-01 09:40:31 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-08-01 09:40:31 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-08-01 09:40:31 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-08-01 09:40:31 ----A---- C:\Windows\system32\dimsroam.dll
2014-08-01 09:40:31 ----A---- C:\Windows\system32\cngprovider.dll
2014-08-01 09:40:31 ----A---- C:\Windows\system32\capiprovider.dll
2014-08-01 09:40:31 ----A---- C:\Windows\system32\adprovider.dll
2014-08-01 09:40:30 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-08-01 09:40:30 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-08-01 09:40:29 ----A---- C:\Windows\system32\wincredprovider.dll
2014-08-01 09:40:28 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-08-01 09:38:47 ----A---- C:\Windows\system32\shell32.dll
2014-08-01 09:38:46 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-01 09:38:44 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-08-01 09:38:44 ----A---- C:\Windows\system32\win32k.sys
2014-08-01 09:38:43 ----A---- C:\Windows\system32\osk.exe
2014-08-01 09:38:40 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-08-01 09:38:40 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-08-01 09:38:40 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-08-01 09:38:40 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-08-01 09:38:40 ----A---- C:\Windows\system32\msxml6r.dll
2014-08-01 09:38:40 ----A---- C:\Windows\system32\msxml6.dll
2014-08-01 09:38:40 ----A---- C:\Windows\system32\msxml3r.dll
2014-08-01 09:38:40 ----A---- C:\Windows\system32\msxml3.dll
2014-08-01 09:38:35 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-08-01 09:38:35 ----A---- C:\Windows\system32\qedit.dll
2014-08-01 09:34:11 ----A---- C:\Windows\system32\lsasrv.dll
2014-08-01 09:34:10 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-08-01 09:34:09 ----A---- C:\Windows\system32\sspisrv.dll
2014-08-01 09:34:09 ----A---- C:\Windows\system32\sspicli.dll
2014-08-01 09:34:09 ----A---- C:\Windows\system32\lsass.exe
2014-08-01 09:34:09 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-08-01 09:34:05 ----A---- C:\Windows\system32\secur32.dll
2014-08-01 09:34:00 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-08-01 09:33:59 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-31 14:32:07 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-07-31 14:31:59 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-07-31 14:31:42 ----A---- C:\Windows\avastSS.scr
2014-07-25 11:44:53 ----D---- C:\Program Files (x86)\MidSpace
2014-07-19 10:33:04 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-07-19 10:32:58 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-07-19 10:32:58 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-07-19 10:32:58 ----A---- C:\Windows\SYSWOW64\java.exe
2014-07-15 13:59:17 ----D---- C:\Program Files (x86)\AGEIA Technologies

======List of files/folders modified in the last 1 month======

2014-08-02 18:30:36 ----D---- C:\Windows\Temp
2014-08-02 18:25:25 ----D---- C:\Windows\system32\Tasks
2014-08-02 18:14:49 ----D---- C:\Program Files (x86)\Steam
2014-08-02 18:11:05 ----D---- C:\ProgramData\Spyware Terminator
2014-08-02 18:10:29 ----D---- C:\ProgramData\NVIDIA
2014-08-02 16:51:40 ----D---- C:\Program Files (x86)\Trillian
2014-08-02 13:03:31 ----D---- C:\Windows\Microsoft.NET
2014-08-02 09:25:58 ----RSD---- C:\Windows\assembly
2014-08-02 09:11:36 ----D---- C:\Windows\System32
2014-08-02 09:11:36 ----D---- C:\Windows\inf
2014-08-02 09:11:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-02 07:22:51 ----D---- C:\Users\Radek\AppData\Roaming\Media Player Classic
2014-08-02 07:17:39 ----D---- C:\Windows\system32\config
2014-08-02 06:49:37 ----SHD---- C:\Windows\Installer
2014-08-02 06:46:42 ----D---- C:\Windows\winsxs
2014-08-02 06:46:14 ----SHD---- C:\System Volume Information
2014-08-02 06:45:23 ----D---- C:\Windows\system32\catroot2
2014-08-02 06:45:23 ----D---- C:\Windows\system32\catroot
2014-08-02 06:38:18 ----D---- C:\Windows\SysWOW64
2014-08-02 06:38:01 ----D---- C:\Windows\system32\cs-CZ
2014-08-01 21:10:54 ----D---- C:\Windows\Minidump
2014-08-01 21:10:45 ----D---- C:\Windows
2014-08-01 20:37:40 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-01 20:24:48 ----D---- C:\Program Files
2014-08-01 20:13:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-08-01 20:04:52 ----D---- C:\Windows\SYSWOW64\wbem
2014-08-01 20:04:52 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-01 20:04:47 ----D---- C:\Windows\PolicyDefinitions
2014-08-01 20:04:42 ----D---- C:\Windows\system32\en-US
2014-08-01 20:04:42 ----D---- C:\Windows\system32\drivers\en-US
2014-08-01 20:04:41 ----D---- C:\Windows\system32\drivers
2014-08-01 20:04:40 ----D---- C:\Windows\system32\wbem
2014-08-01 20:04:28 ----D---- C:\Windows\system32\DriverStore
2014-08-01 19:40:54 ----D---- C:\Windows\SoftwareDistribution
2014-08-01 19:30:10 ----D---- C:\Windows\debug
2014-08-01 19:27:13 ----D---- C:\Windows\Panther
2014-08-01 19:27:12 ----D---- C:\Windows\Logs
2014-08-01 19:12:03 ----HD---- C:\ProgramData
2014-08-01 19:09:26 ----RD---- C:\Program Files (x86)
2014-08-01 17:33:22 ----D---- C:\Program Files (x86)\Carambis
2014-08-01 17:30:34 ----D---- C:\Games
2014-08-01 15:24:30 ----D---- C:\Program Files\Internet Explorer
2014-08-01 15:24:30 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-01 15:24:28 ----D---- C:\Windows\SYSWOW64\migration
2014-08-01 15:24:24 ----D---- C:\Windows\system32\migration
2014-08-01 15:22:58 ----D---- C:\ProgramData\Microsoft Help
2014-08-01 13:53:31 ----D---- C:\Program Files (x86)\Common Files
2014-08-01 13:53:30 ----D---- C:\Windows\Tasks
2014-08-01 13:22:33 ----RD---- C:\Program Files (x86)\Skype
2014-08-01 12:46:31 ----SD---- C:\ProgramData\Microsoft
2014-08-01 11:54:39 ----D---- C:\Program Files\Windows Journal
2014-08-01 11:42:21 ----D---- C:\Windows\SYSWOW64\Dism
2014-08-01 11:42:20 ----D---- C:\Windows\system32\Dism
2014-08-01 10:34:49 ----D---- C:\Windows\ehome
2014-08-01 09:52:10 ----D---- C:\Windows\system32\MRT
2014-08-01 09:44:37 ----D---- C:\Windows\Prefetch
2014-08-01 07:22:41 ----D---- C:\Users\Radek\AppData\Roaming\Winamp
2014-08-01 07:22:39 ----D---- C:\Users\Radek\AppData\Roaming\uTorrent
2014-07-31 14:31:43 ----A---- C:\Windows\system32\aswBoot.exe
2014-07-24 06:48:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-24 06:48:16 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-07-23 10:52:00 ----N---- C:\Windows\system32\MpSigStub.exe
2014-07-23 07:56:32 ----D---- C:\ProgramData\WarThunder
2014-07-23 06:56:40 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2014-07-19 10:33:20 ----D---- C:\ProgramData\Oracle
2014-07-19 10:32:56 ----D---- C:\Program Files (x86)\Java
2014-07-16 07:08:59 ----D---- C:\Windows\system32\NDF
2014-07-15 13:59:17 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-07-09 18:12:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-31 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-31 224896]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-31 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-31 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-31 427360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-11 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-31 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-31 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-31 92008]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2011-10-04 51496]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-01-26 39808]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-01-26 64256]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-08-02 25640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-09-17 196384]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
R3 SaiK1705;SaiK1705; C:\Windows\system32\DRIVERS\SaiK1705.sys [2012-09-20 180584]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU1705;SaiU1705; C:\Windows\system32\DRIVERS\SaiU1705.sys [2012-09-20 47208]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2011-10-06 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2011-11-08 30528]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 netr7364;ASUS USB - ovladač karty pro bezdrátovou síť LAN pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr7364.sys [2009-06-10 707072]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-08-01 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-08-01 57856]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-31 50344]
R2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
R2 McNeelUpdate;McNeel Update Service 5.0; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [2012-10-25 67752]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-17 1364256]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-11-10 76888]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 PSI_SVC_2_x64;Protexis Licensing V2 x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-11-30 336824]
R2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2011-09-28 1148632]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-01 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-07-23 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-08-01 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

[Rudy]

Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[no_gravity]

# AdwCleaner v3.302 - Report created 02/08/2014 at 18:47:40
# Updated 30/07/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Radek - RADEK-PC
# Running from : C:\Users\Radek\Desktop\adwcleaner_3.302.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : AppleChargerSrv

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Users\Radek\AppData\Local\apn
Folder Deleted : C:\Users\Radek\AppData\Local\PackageAware
Folder Deleted : C:\Users\Radek\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\Radek\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\Radek\AppData\Roaming\ParetoLogic
File Deleted : C:\Windows\System32\AppleChargerSrv.exe
File Deleted : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F3DC9E0-C459-4A40-BCF8-747BD9322E10}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFE66D00-A56A-4F7F-81D7-4A28C5816D6C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\facemoods.com
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKLM\Software\facemoods.com
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\PIP

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]

-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\prefs.js ]


*************************

AdwCleaner[R0].txt - [3417 octets] - [02/08/2014 18:46:15]
AdwCleaner[S0].txt - [3062 octets] - [02/08/2014 18:47:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3122 octets] ##########

[Rudy]

Dejte nový log RSIT.

[no_gravity]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Radek (administrator) on RADEK-PC on 02-08-2014 20:20:53
Running from C:\Users\Radek\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
() C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files (x86)\Trillian\plugins\skypekit.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Farbar) C:\Users\Radek\Desktop\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928 2014-02-11] (IObit)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [24477056 2014-06-27] (Google)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [Facebook Update] => "C:\Users\Radek\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {8092b058-e54a-11e0-8114-50e5493be47c} - E:\steambackup2.EXE
HKU\S-1-5-21-2314290084-1386636348-271833993-1000\...\MountPoints2: {c6c5a4c8-e4ac-11e0-b2c1-806e6f6e6963} - D:\Run.exe
Startup: C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
SearchScopes: HKCU - DefaultScope {4F7660E9-6DD9-4e32-A11F-7EA356121ADB} URL = http://uk.search.yahoo.com/search?p={se ... ype=IEBDSV
SearchScopes: HKCU - {4F7660E9-6DD9-4e32-A11F-7EA356121ADB} URL = http://uk.search.yahoo.com/search?p={se ... ype=IEBDSV
SearchScopes: HKCU - {57EA2068-C59C-4789-BDAD-B28D7402028F} URL = http://www.google.com/cse?cx=partner-pu ... earchTerms}
SearchScopes: HKCU - {D6BB3A7E-DA07-4c94-933C-A5E4E9CF3239} URL = http://www.bing.com/search?q={searchTer ... R1&pc=SPLH
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Radek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\ascsurfingprotection@iobit.com [2014-08-01]
FF Extension: F.B. Purity - Cleans Up Facebook - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\fbp@fbpurity.com.xpi [2014-08-01]
FF Extension: Adblock Plus - C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\86bcq1os.default-1406904562761\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-31] (AVAST Software)
R2 DES2 Service; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [68136 2009-06-17] ()
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
S2 McNeelUpdate; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67752 2012-10-25] (Robert McNeel & Associates)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-10] ()
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) [File not signed]
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148632 2011-09-28] (Crawler.com)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-31] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-31] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-11] (DT Soft Ltd)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2011-11-08] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2011-10-04] (Windows (R) Win 7 DDK provider)
R2 sp_rsdrv2; C:\Windows\SysWOW64\DRIVERS\stflt.sys [51496 2011-10-04] (Windows (R) Win 7 DDK provider)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-02 18:48 - 2014-08-02 18:48 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-02 18:46 - 2014-08-02 18:47 - 00000000 ____D () C:\AdwCleaner
2014-08-02 18:45 - 2014-08-02 18:45 - 01361309 _____ () C:\Users\Radek\Desktop\adwcleaner_3.302.exe
2014-08-02 18:30 - 2014-08-02 18:30 - 01222144 _____ () C:\Users\Radek\Downloads\RSITx64.exe
2014-08-02 06:45 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-02 06:45 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-08-02 06:45 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-02 06:36 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 06:36 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 06:36 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 06:36 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 06:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 06:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-02 06:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-02 06:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-01 21:10 - 2014-08-01 21:10 - 553704047 _____ () C:\Windows\MEMORY.DMP
2014-08-01 21:10 - 2014-08-01 21:10 - 00287376 _____ () C:\Windows\Minidump\080114-24304-01.dmp
2014-08-01 20:43 - 2014-08-01 20:44 - 00040347 _____ () C:\Users\Radek\Desktop\Addition.txt
2014-08-01 20:42 - 2014-08-02 20:21 - 00000000 ____D () C:\FRST
2014-08-01 20:42 - 2014-08-02 20:20 - 00017592 _____ () C:\Users\Radek\Desktop\FRST.txt
2014-08-01 20:24 - 2014-08-02 18:30 - 00000000 ____D () C:\Program Files\trend micro
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\rsit
2014-08-01 20:02 - 2014-08-02 20:16 - 00001680 _____ () C:\Windows\setupact.log
2014-08-01 20:02 - 2014-08-01 20:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-01 19:59 - 2014-08-01 19:59 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00000000 ____D () C:\f9e2593ffdaac809474d
2014-08-01 19:53 - 2014-08-01 19:53 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-08-01 19:53 - 2014-08-01 19:53 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-01 19:19 - 2014-08-01 19:19 - 86720512 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 47206400 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00221184 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SAM.iobit
2014-08-01 19:12 - 2014-08-02 18:25 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-01 19:12 - 2014-08-01 19:12 - 00003094 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Apple Computer
2014-08-01 19:09 - 2014-08-02 18:25 - 00000000 ____D () C:\ProgramData\IObit
2014-08-01 19:09 - 2014-08-01 20:21 - 00002205 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-08-01 19:09 - 2014-08-01 19:12 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00002850 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Radek
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-01 19:08 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\IObit
2014-08-01 19:08 - 2014-08-01 19:08 - 00000223 _____ () C:\ASCInit.log
2014-08-01 19:06 - 2014-08-01 19:06 - 02094080 _____ (Farbar) C:\Users\Radek\Desktop\FRST64(1).exe
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-08-01 14:00 - 2014-08-01 14:00 - 00001684 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-01 13:00 - 2014-08-01 13:00 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-08-01 13:00 - 2014-08-01 13:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 13:00 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-08-01 09:41 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-08-01 09:41 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-08-01 09:41 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-08-01 09:41 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-08-01 09:41 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-08-01 09:41 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-01 09:41 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-08-01 09:40 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-08-01 09:40 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-08-01 09:40 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-08-01 09:40 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-08-01 09:40 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-08-01 09:40 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-08-01 09:40 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-08-01 09:40 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-08-01 09:40 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-08-01 09:40 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-08-01 09:38 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-08-01 09:38 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-08-01 09:38 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-01 09:38 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-08-01 09:38 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-08-01 09:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-08-01 09:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-08-01 09:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-08-01 09:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-08-01 09:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-08-01 09:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-08-01 09:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-08-01 09:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-08-01 09:38 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-01 09:38 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-01 09:34 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-08-01 09:34 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-08-01 09:34 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-08-01 09:34 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-08-01 09:34 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-08-01 09:34 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-08-01 09:34 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-08-01 09:34 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-08-01 09:33 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-31 14:32 - 2014-07-31 14:31 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-31 14:31 - 2014-07-31 14:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-31 14:31 - 2014-07-31 14:31 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-25 11:46 - 2014-07-25 11:46 - 00000000 ____D () C:\Users\Radek\AppData\Local\MidSpace
2014-07-25 11:45 - 2014-07-25 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MidSpace
2014-07-25 11:44 - 2014-07-25 11:44 - 00000000 ____D () C:\Program Files (x86)\MidSpace
2014-07-24 07:23 - 2014-07-24 07:23 - 00000000 ____D () C:\Users\Radek\AppData\Local\Harebrained Schemes
2014-07-20 19:37 - 2014-07-20 19:37 - 00039607 _____ () C:\731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
2014-07-19 10:33 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-19 10:32 - 2014-07-19 10:32 - 00004114 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-19 10:32 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-19 10:32 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-19 10:32 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-15 13:59 - 2014-07-15 13:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-09 22:07 - 2014-07-09 22:07 - 00001010 _____ () C:\Users\Radek\Desktop\sdfgs.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-02 20:21 - 2014-08-01 20:42 - 00017592 _____ () C:\Users\Radek\Desktop\FRST.txt
2014-08-02 20:21 - 2014-08-01 20:42 - 00000000 ____D () C:\FRST
2014-08-02 20:21 - 2012-10-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-02 20:18 - 2014-05-25 19:25 - 00000000 ___RD () C:\Users\Radek\Disk Google
2014-08-02 20:17 - 2014-05-25 19:23 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-02 20:17 - 2011-10-04 17:49 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-08-02 20:17 - 2011-09-21 20:20 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-08-02 20:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-02 20:16 - 2014-08-01 20:02 - 00001680 _____ () C:\Windows\setupact.log
2014-08-02 20:16 - 2011-09-21 20:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-02 19:34 - 2014-05-25 19:23 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-02 19:30 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-02 19:30 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-02 19:26 - 2012-05-04 22:52 - 01352587 _____ () C:\Windows\WindowsUpdate.log
2014-08-02 19:23 - 2013-10-28 12:53 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-02 19:12 - 2012-04-12 17:12 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-02 18:48 - 2014-08-02 18:48 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-02 18:47 - 2014-08-02 18:46 - 00000000 ____D () C:\AdwCleaner
2014-08-02 18:45 - 2014-08-02 18:45 - 01361309 _____ () C:\Users\Radek\Desktop\adwcleaner_3.302.exe
2014-08-02 18:45 - 2012-06-11 22:06 - 00000000 ____D () C:\Program Files (x86)\Trillian
2014-08-02 18:30 - 2014-08-02 18:30 - 01222144 _____ () C:\Users\Radek\Downloads\RSITx64.exe
2014-08-02 18:30 - 2014-08-01 20:24 - 00000000 ____D () C:\Program Files\trend micro
2014-08-02 18:25 - 2014-08-01 19:12 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-02 18:25 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\IObit
2014-08-02 17:54 - 2011-09-29 20:03 - 00000000 ____D () C:\Users\Radek\Documents\My Games
2014-08-02 16:46 - 2012-10-01 20:59 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-08-02 09:11 - 2009-07-14 17:18 - 00685228 _____ () C:\Windows\system32\perfh005.dat
2014-08-02 09:11 - 2009-07-14 17:18 - 00151890 _____ () C:\Windows\system32\perfc005.dat
2014-08-02 09:11 - 2009-07-14 07:13 - 01620964 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-02 09:08 - 2014-04-03 20:56 - 00000000 ____D () C:\Users\Radek\Downloads\torrenty
2014-08-02 08:12 - 2012-05-20 16:50 - 00002516 ___SH () C:\ProgramData\KGyGaAvL.sys
2014-08-02 08:12 - 2012-05-20 16:50 - 00000088 __RSH () C:\ProgramData\BB19C957D1.sys
2014-08-02 07:22 - 2011-09-22 20:59 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Media Player Classic
2014-08-01 21:10 - 2014-08-01 21:10 - 553704047 _____ () C:\Windows\MEMORY.DMP
2014-08-01 21:10 - 2014-08-01 21:10 - 00287376 _____ () C:\Windows\Minidump\080114-24304-01.dmp
2014-08-01 21:10 - 2011-09-29 14:15 - 00000000 ____D () C:\Windows\Minidump
2014-08-01 20:44 - 2014-08-01 20:43 - 00040347 _____ () C:\Users\Radek\Desktop\Addition.txt
2014-08-01 20:24 - 2014-08-01 20:24 - 00000000 ____D () C:\rsit
2014-08-01 20:21 - 2014-08-01 19:09 - 00002205 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-08-01 20:13 - 2011-10-07 07:14 - 01587452 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-08-01 20:07 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-01 20:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-01 20:02 - 2014-08-01 20:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-01 19:59 - 2014-08-01 19:59 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-01 19:59 - 2014-08-01 19:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-01 19:59 - 2014-08-01 19:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-01 19:59 - 2014-08-01 19:59 - 00000000 ____D () C:\f9e2593ffdaac809474d
2014-08-01 19:53 - 2014-08-01 19:53 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-08-01 19:53 - 2014-08-01 19:53 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-01 19:46 - 2011-09-22 02:02 - 00000000 ____D () C:\Users\Radek
2014-08-01 19:27 - 2014-04-26 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCAD 0.13
2014-08-01 19:27 - 2013-12-08 12:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warplanes
2014-08-01 19:27 - 2011-09-28 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 2 (CZ)
2014-08-01 19:27 - 2011-09-22 02:51 - 00000000 ____D () C:\Windows\Panther
2014-08-01 19:19 - 2014-08-01 19:19 - 86720512 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 47206400 _____ () C:\Windows\system32\config\COMPONENTS.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00221184 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-08-01 19:19 - 2014-08-01 19:19 - 00032768 _____ () C:\Windows\system32\config\SAM.iobit
2014-08-01 19:12 - 2014-08-01 19:12 - 00003094 _____ () C:\Windows\System32\Tasks\ASC7_PerformanceMonitor
2014-08-01 19:12 - 2014-08-01 19:12 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Apple Computer
2014-08-01 19:12 - 2014-08-01 19:09 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-01 19:12 - 2014-08-01 19:08 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\IObit
2014-08-01 19:09 - 2014-08-01 19:09 - 00002850 _____ () C:\Windows\System32\Tasks\ASC7_SkipUac_Radek
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-08-01 19:09 - 2014-08-01 19:09 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-01 19:08 - 2014-08-01 19:08 - 00000223 _____ () C:\ASCInit.log
2014-08-01 19:06 - 2014-08-01 19:06 - 02094080 _____ (Farbar) C:\Users\Radek\Desktop\FRST64(1).exe
2014-08-01 17:33 - 2011-12-23 23:55 - 00000000 ____D () C:\Program Files (x86)\Carambis
2014-08-01 17:30 - 2011-09-28 08:40 - 00000000 ____D () C:\Games
2014-08-01 15:26 - 2011-09-22 02:02 - 00001393 _____ () C:\Users\Radek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-01 15:25 - 2009-07-14 07:08 - 00032594 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2014-08-01 15:22 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-08-01 15:22 - 2011-09-22 21:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-01 14:00 - 2014-08-01 14:00 - 00001684 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-08-01 14:00 - 2014-08-01 14:00 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-01 13:31 - 2014-04-13 16:26 - 00000000 ____D () C:\Users\Radek\AppData\Local\Facebook
2014-08-01 13:22 - 2011-09-28 19:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-01 13:19 - 2011-10-03 08:04 - 00000000 ____D () C:\Users\Radek\AppData\Local\Deployment
2014-08-01 13:00 - 2014-08-01 13:00 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-01 13:00 - 2014-08-01 13:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-08-01 13:00 - 2014-08-01 13:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-01 13:00 - 2014-08-01 12:59 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-01 12:59 - 2014-08-01 12:59 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-01 12:59 - 2014-08-01 12:59 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-08-01 12:59 - 2014-08-01 12:59 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-08-01 12:59 - 2014-08-01 12:59 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-08-01 12:59 - 2014-08-01 12:59 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-08-01 12:59 - 2014-08-01 12:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-01 11:54 - 2009-07-14 17:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-01 11:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-01 11:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-01 10:36 - 2012-12-22 10:46 - 00500096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-01 09:52 - 2013-10-27 10:56 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-01 07:22 - 2011-10-07 22:36 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\uTorrent
2014-08-01 07:22 - 2011-09-22 20:45 - 00000000 ____D () C:\Users\Radek\AppData\Roaming\Winamp
2014-07-31 14:32 - 2013-10-28 12:57 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-31 14:32 - 2011-10-04 17:50 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-31 14:31 - 2014-07-31 14:32 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-31 14:31 - 2014-07-31 14:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-31 14:31 - 2014-07-31 14:31 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-31 14:31 - 2013-10-28 12:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-31 14:31 - 2013-10-28 12:53 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-31 14:31 - 2013-10-28 12:53 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-31 14:31 - 2011-10-04 17:50 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-31 14:31 - 2011-10-04 17:50 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-31 14:31 - 2011-10-04 17:50 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-25 11:46 - 2014-07-25 11:46 - 00000000 ____D () C:\Users\Radek\AppData\Local\MidSpace
2014-07-25 11:45 - 2014-07-25 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MidSpace
2014-07-25 11:44 - 2014-07-25 11:44 - 00000000 ____D () C:\Program Files (x86)\MidSpace
2014-07-24 07:23 - 2014-07-24 07:23 - 00000000 ____D () C:\Users\Radek\AppData\Local\Harebrained Schemes
2014-07-24 06:48 - 2014-06-18 19:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-24 06:48 - 2012-04-25 18:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-23 10:52 - 2011-09-22 20:59 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-23 07:56 - 2014-06-06 18:31 - 00000000 ____D () C:\ProgramData\WarThunder
2014-07-23 06:56 - 2014-05-10 07:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-07-20 19:37 - 2014-07-20 19:37 - 00039607 _____ () C:\731c4cac-a7bb-4d0f-b6a2-e72aefd676c3.dmp
2014-07-19 10:33 - 2013-12-11 10:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-19 10:32 - 2014-07-19 10:32 - 00004114 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-19 10:32 - 2011-09-22 20:54 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-16 07:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-15 14:03 - 2012-10-06 21:11 - 00000000 ____D () C:\Users\Radek\AppData\Local\4A Games
2014-07-15 13:59 - 2014-07-15 13:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-15 13:59 - 2011-09-21 20:19 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-11 03:02 - 2014-07-19 10:32 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-19 10:33 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-19 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-19 10:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-09 22:07 - 2014-07-09 22:07 - 00001010 _____ () C:\Users\Radek\Desktop\sdfgs.txt
2014-07-09 18:12 - 2012-04-12 17:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 18:12 - 2012-04-12 17:12 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 18:12 - 2011-09-25 17:08 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-07 17:37 - 2014-05-25 19:24 - 00002042 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00002040 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-07-07 17:37 - 2014-05-25 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

Some content of TEMP:
====================
C:\Users\Radek\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 14:27

==================== End Of Log ============================